IBM Security Bulletin: Multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6, affects: Web Experience Factory (CVE-2016-3427, CVE-2016-3426, CVE-2016-0264)

There are multiple vulnerabilities in IBM® Runtime Environments Java™ Technology Edition, Version 6, that is used by Web Experience Factory. These issues were disclosed as part of the IBM Java SDK updates in April 2016. The vulnerabilities may affect some configurations of products bundled with Web Experience Factory.

CVE(s): CVE-2016-3427, CVE-2016-3426, CVE-2016-0264


Affected product(s) and affected version(s):

All versions of Web Experience Factory 8.5, 8.0, 7.0.1, and 7.0.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1TuaTWk
X-Force Database: http://ift.tt/1N2N48r
X-Force Database: http://ift.tt/1N2N2xe
X-Force Database: http://ift.tt/1Tg5wqG


from IBM Product Security Incident Response Team http://ift.tt/27LaQg6