XML External Entity Injection Vulnerability in IBM Cognos Controller

CVE-2020-4875

What is CVE-2020-4875?

IBM Cognos Controller versions 10.4.0, 10.4.1, and 10.4.2 are susceptible to an XML External Entity Injection (XXE) vulnerability. This issue occurs during the processing of XML data, where a remote attacker can exploit this flaw to gain unauthorized access to sensitive information or exhaust system resources, potentially leading to an application's instability. Organizations using these versions must implement mitigation strategies to protect against this vulnerability. For more details, refer to the IBM support page and X-Force ID 190838.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References