IBM Security Bulletin: Security Vulnerabilities in Spring Framework affect IBM WebSphere Portal

A fix is available for security vulnerabilities in Spring Framework affecting IBM WebSphere Portal (CVE-2013-4152, CVE-2013-6429, CVE-2013-6430, CVE-2013-7315, CVE-2014-0054, CVE-2014-1904).

CVE(s): CVE-2013-4152, CVE-2013-6429, CVE-2013-6430, CVE-2013-7315, CVE-2014-0054, CVE-2014-1904

Affected product(s) and affected version(s):

IBM WebSphere Portal 8.5*
IBM WebSphere Portal 8.0*

* only if Rich Media Edition is used.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2e1d2hR
X-Force Database: http://ift.tt/2eeIMvh
X-Force Database: http://ift.tt/1uHiGRp
X-Force Database: http://ift.tt/1ovunOk
X-Force Database: http://ift.tt/2e1fwwv
X-Force Database: http://ift.tt/2eeHjVR
X-Force Database: http://ift.tt/2e1fsNx

from IBM Product Security Incident Response Team http://ift.tt/2eeFtnM