IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Controller.

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Technology Edition, Version 7 that is used by IBM Cognos Controller. These issues were disclosed as part of the IBM Java SDK updates in January 2016.

CVE(s): CVE-2016-0466, CVE-2016-0448

Affected product(s) and affected version(s):

IBM Cognos Controller 10.2.1

IBM Cognos Controller 10.2

IBM Cognos Controller 10.1.1

IBM Cognos Controller 10.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2mDeDc9
X-Force Database: http://ift.tt/1N2N3Bz
X-Force Database: http://ift.tt/1WhPjpX

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Controller. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2m3hqi8