IBM BigFix Remote Control prior to 9.1.3 allows remote malicious users to conduct XML injection attacks via unspecified vectors.
ibm bigfix remote control