IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force ID: 251463.Referenceshttps://www.ibm.com/support/pages/node/7149876https://exchange.xforce.ibmcloud.com/vulnerabilities/251463
