IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by an XML External Entity (XXE) injection vulnerability. This flaw allows a remote attacker with low privileges to process crafted XML data that could lead to exposure of sensitive information or excessive memory consumption, potentially causing denial of service. The vulnerability is rated high severity with a CVSS score of 7.1.