The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 prior to 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm jazz reporting service 6.0 |
||
ibm jazz reporting service 6.0.1 |
Vulmon