IBM Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Cognos Metrics Manager (CVE-2016-3485)
There is a vulnerability in IBM® Runtime Environment Java™ Versions 6 and 7 that are used by IBM Cognos Metrics Manager. This issue was disclosed as part of the IBM Java SDK updates in July 2016.
CVE(s): CVE-2016-3485
Affected product(s) and affected version(s):
- IBM Cognos Metrics Manager 10.2.2
- IBM Cognos Metrics Manager 10.2.1
- IBM Cognos Metrics Manager 10.2
- IBM Cognos Metrics Manager 10.1.1
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2j40yq0
X-Force Database: http://ift.tt/2b7G65u
from IBM Product Security Incident Response Team http://ift.tt/2j4327T