IBM Security Bulletin: Apache POI as used in IBM QRadar SIEM is vulnerable to various CVEs.
Vulnerabilities affecting Apache Poi as used in IBM QRadar SIEM
CVE(s): CVE-2012-0213, CVE-2014-3529, CVE-2014-3574, CVE-2014-9527, CVE-2016-5000
Affected product(s) and affected version(s):
· IBM QRadar 7.2.n
· IBM QRadar 7.1.n
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hclrL6
X-Force Database: http://ift.tt/2dFdUrV
X-Force Database: http://ift.tt/2cOIhpQ
X-Force Database: http://ift.tt/2cOGReI
X-Force Database: http://ift.tt/2dFfcmC
X-Force Database: http://ift.tt/2dFewhf
from IBM Product Security Incident Response Team http://ift.tt/2hco5Ay