IBM Security Bulletin:Open Source Apache Xerces-C XML parser Vulnerabilities (CVE-2016-0729 CVE-2016-4463)

Open Source Xerces-C XML parser vulnerabilities affect AppScan Source.

CVE(s): CVE-2016-0729, CVE-2016-4463

Affected product(s) and affected version(s):

IBM Security AppScan Source 8.7, 8.8, 9.0, 9.0.1, 9.0.2, 9.0.3

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b5ApEC
X-Force Database: http://ift.tt/297OoIU
X-Force Database: http://ift.tt/2b5BVXc

from IBM Product Security Incident Response Team http://ift.tt/2bgufhj