IBM Security Bulletin: July 2016 Java Platform Standard Edition Vulnerabilities in N series Products

Share this post:

Multiple N series products incorporate the Oracle Java Platform, Standard Edition (Java SE) software libraries. Java SE (JDK and JRE) versions below 6u121, 7u111, and 8u101 are susceptible to multiple vulnerabilities, potentially leading to unauthenticated remote code execution, a partial denial of service (DoS) of Java, or unauthorized reading or modification of a subset of data accessible to the Java process.

CVE(s): CVE-2016-3610, CVE-2016-3598, CVE-2016-3606, CVE-2016-3587, CVE-2016-3511, CVE-2016-3508, CVE-2016-3550, CVE-2016-3500, CVE-2016-3458, CVE-2016-3485, CVE-2016-3498, CVE-2016-3552, CVE-2016-3503

Affected product(s) and affected version(s):

NS OnCommand Core Package: 5.2, 5.2R1, 5.2.1P1, 5.2.1P2;
Virtual Storage Console for VMware vSphere: 6.0, 6.1, 6.2;

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2xvWdAI
X-Force Database: http://ift.tt/2b7GBwx
X-Force Database: http://ift.tt/2aGcUP3
X-Force Database: http://ift.tt/2b7H1Te
X-Force Database: http://ift.tt/2aGbWSW
X-Force Database: http://ift.tt/2b7Gtgl
X-Force Database: http://ift.tt/2ctomSx
X-Force Database: http://ift.tt/2aGc4lp
X-Force Database: http://ift.tt/2ctom4Z
X-Force Database: http://ift.tt/2bTrNgj
X-Force Database: http://ift.tt/2b7G65u
X-Force Database: http://ift.tt/2bTqVZ8
X-Force Database: http://ift.tt/2ctoPUY
X-Force Database: http://ift.tt/2bTrbY9



from IBM Product Security Incident Response Team http://ift.tt/2xv6f5f