IBM Security Bulletin: Multiple security vulnerabilities in ElasticSearch might affect Process Federation Server (PFS) in IBM Business Process Manager (BPM) - CVE-2015-5531, CVE-2015-5377

IBM Process Federation Server (PFS) is an optional component that is shipped with IBM Business Process Manager (BPM) V8.5.6.0. It allows the collection of task information of existing IBM Business Process Manager environments to provide a federated task list....

from IBM Product Security Incident Response Team http://ift.tt/1HLbdqq