IBM Security Bulletin: Security exposure in IBM Cognos Incentive Compensation Management (CVE-2014-0107)

There is a security vulnerability whereby a remote attacker could bypass security restrictions in Apache Xalan-Java within IBM Cognos Incentive Compensation Management 8.x and 7.x. CVE(s): CVE-2014-0107 Affected product(s) and affected...



via IBM Product Security Incident Response Team http://ibm.co/1qcUPcu