CVE-2022-36773

The CVE-2022-36773 entry concerns IBM Cognos Analytics versions 11.1.7, 11.2.0, and 11.2.1 that are vulnerable to an XML External Entity (XXE) injection when processing XML data. The root cause is an XXE flaw in XML data handling, which could allow a remote attacker to read sensitive information ...