description: IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.
problem types: Obtain Information
affected:
{
product: InfoSphere Information Server
vendor: IBM Corporation
versions:
status: affected, version: 8.1
status: affected, version: 8.5
status: affected, version: 8.0
status: affected, version: 8.5.0.1
status: affected, version: 8.7
status: affected, version: 9.1
status: affected, version: 8.0.1
status: affected, version: 10.0
status: affected, version: 11.3
status: affected, version: 10
status: affected, version: 11.3.0.0
status: affected, version: 11.3.1.0
status: affected, version: 11.5
}