CVE:CVE-2014-6114
CNNVD:CNNVD-201412-084
IBM WebSphere ILOG JRules、WebSphere Operational Decision Management（WODM）和Operational Decision Manager都是美国IBM公司的产品。IBM WebSphere ILOG JRules是一套业务规则管理系统（BRMS）。IBM WODM和Operational Decision Manager都是用于捕获、自动执行和治理频繁出现的重复性业务决策的运营决策管理平台。
多款IBM产品中的Rule Execution Server中的Hosted Transparent Decision Service存在安全漏洞。远程攻击者可借助XML外部实体声明和实体引用利用该漏洞读取任意文件。以下产品和版本受到影响：IBM WebSphere ILOG JRules 7.1版本；WebSphere Operational Decision Management 7.5版本；Operational Decision Manager 8.0版本，8.5版本，8.6版本。
solution:Upgrade ibm operational_decision_manager to a higher version than 8.0,8.5,8.6,and avoid the version 8.0,8.5,8.6; Upgrade ibm websphere_ilog_jrules to a higher version than 7.1,and avoid the version 7.1; Upgrade ibm websphere_operational_decision_management to a higher version than 7.5,and avoid the version 7.5