CVE-2021-20464

https://notcve.org/view.php?id=CVE-2021-20464

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813. IBM Cognos Analytics PowerPlay (IBM Cognos Analytics versiones 11.1.7, 11.2.0 y 11.1.7) podría ser vulnerable a un ataque de Bomba XML por parte de un usuario autenticado malicioso. IBM X-Force ID: 196813 • https://exchange.xforce.ibmcloud.com/vulnerabilities/196813 https://security.netapp.com/advisory/ntap-20220602-0003 https://www.ibm.com/support/pages/node/6570957 • CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') •