CVE-2018-1845

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7

Description The issue allows for a XML External Entity Injection (XXE) attack when processing XML data, potentially enabling a remote attacker to expose sensitive information or consume memory resources.

Recommendations For IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7, update to a version that includes a fix for this issue to prevent XXE attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.