IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Sterling Control Center (CVE-2016-3427 and CVE-2016-3426)

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7 that is used by IBM Control Center. These issues were disclosed as part of the IBM Java SDK updates in April 2016.

CVE(s): CVE-2016-3427, CVE-2016-3426

Affected product(s) and affected version(s):

IBM Control Center 6.1.0.0 through 6.1.0.0 iFix02
IBM Control Center 6.0.0.0 through 6.0.0.1 iFix05
IBM Sterling Control Center 5.4.2 through 5.4.2.1 iFix08

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/29HSaFD
X-Force Database: http://ift.tt/1N2N48r
X-Force Database: http://ift.tt/1N2N2xe

from IBM Product Security Incident Response Team http://ift.tt/29HSKmT