Description BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. References http://support.sas.com/kb/62/987.html