CVE-2018-1920

The CVE-2018-1920 entry concerns IBM Marketing Platform versions 9.1.0, 9.1.2, and 10.1 that are vulnerable to an XML External Entity (XXE) injection when processing XML data. The root cause is an XXE flaw in the XML parsing/processing pipeline, which could allow a remote attacker to disclose sen...