PT-2017-13956

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5 through 8.5 Description The issue allows for a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory...