XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-Force ID: 110510.
| Software | From | Fixed in |
|---|---|---|
| ibm / infosphere_information_server | 11.5 | 11.5.x |
| ibm / infosphere_information_server | 11.3 | 11.3.1.2 |