IBM Security Bulletin: IBM Business Process Manager (BPM) document store is susceptible to XXE (XML External Entity) attacks. (CVE-2013-5452)

An XML eXternal Entity (XXE) vulnerability has been reported for the embedded component used by IBM BPM document store. CVE(s):   CVE-2013-5452 Affected product(s) and affected version(s): IBM...

from IBM Product Security Incident Response Team http://ift.tt/1KVAcJj