IBM Security Bulletin: Multiple vulnerabilities affect IBM Security AppScan Enterprise

Previous releases of IBM Security AppScan Enterprise are affected by multiple vulnerabilities. OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security AppScan Enterprise. IBM Security AppScan Enterprise has addressed the applicable CVEs.

CVE(s): CVE-2016-2178, CVE-2016-2183, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306, CVE-2016-5983, CVE-2016-5986, CVE-2016-6042

Affected product(s) and affected version(s):

IBM Security AppScan Enterprise 9.0.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hjKgov
X-Force Database: http://ift.tt/2asKHex
X-Force Database: http://ift.tt/2dR3VyC
X-Force Database: http://ift.tt/2dmXjFz
X-Force Database: http://ift.tt/2dmY7tO
X-Force Database: http://ift.tt/2dmYpRr
X-Force Database: http://ift.tt/2cX6Wuu
X-Force Database: http://ift.tt/2ccJKps
X-Force Database: http://ift.tt/2gULmKz

from IBM Product Security Incident Response Team http://ift.tt/2hjMrsq