IBM Security Bulletin: Multiple Denial of Service vulnerabilities with Expat may affect IBM HTTP Server
There are several vulnerabilities that may affect IBM HTTP Server that is used by WebSphere Application Server.
CVE(s): CVE-2012-0876, CVE-2012-1148, CVE-2016-4472, CVE-2016-0718
Affected product(s) and affected version(s):
These vulnerabilities affects the following versions and releases of IBM HTTP Server (powered by Apache) component in all editions of WebSphere Application Server and bundling products.
- Version 9.0
- Version 8.5.5
- Version 8.5
- Version 8.0
- Version 7.0
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2bH6yDd
X-Force Database: http://ift.tt/2aA9yyg
X-Force Database: http://ift.tt/2aAaouW
X-Force Database: http://ift.tt/2bykBrC
X-Force Database: http://ift.tt/2aA9DSH
from IBM Product Security Incident Response Team http://ift.tt/2byl1ht