CVE-2020-4876: XEE
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190839.
Other sources
IBM Cognos Controller is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4876?
CVE-2020-4876 is a vulnerability in IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 that allows for an XML External Entity Injection (XXE) attack.
How does CVE-2020-4876 affect IBM Cognos Controller?
CVE-2020-4876 affects IBM Cognos Controller versions 10.4.0, 10.4.1, and 10.4.2 by enabling a remote attacker to perform an XXE attack, potentially exposing sensitive information or consuming memory resources.
What is the severity rating of CVE-2020-4876?
CVE-2020-4876 has a severity rating of 8.2, which is considered high.
How can I fix CVE-2020-4876?
To fix CVE-2020-4876, it is recommended to upgrade to a version of IBM Cognos Controller that is not affected by this vulnerability.
Where can I find more information about CVE-2020-4876?
You can find more information about CVE-2020-4876 at the following references: [link1] [link2]