IBM Security Bulletin: Vulnerability in Apache Standard Taglibs affects IBM WebSphere Application Server (CVE-2015-0254)
There is an XML External Entity Injection (XXE) vulnerability in the Apache Standard Taglibs that affects IBM WebSphere Application Server.
CVE(s): CVE-2015-0254
Affected product(s) and affected version(s):
This vulnerability affects the following versions and releases of IBM WebSphere Application Server
- Version 8.5.5 Full Profile and Liberty
- Version 8.5 Full Profile and Liberty
- Version 8.0
- Version 7.0
- Version 6.1
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/25Rx7qS
X-Force Database: http://ift.tt/1syxSqm
from IBM Product Security Incident Response Team http://ift.tt/25RxGko