CVE-2018-1721

IBM Cognos Analytics 11.0 and 11.1 are affected by CVE-2018-1721, an XML External Entity Injection (XXE) when processing XML data. A remote attacker could potentially expose sensitive information or cause the web server to make HTTP requests to arbitrary domains due to the XXE flaw. This vulnerab...