IBM Security Bulletin: Multiple vulnerabilities in IBM Runtime Environments Java Technology Edition, versions 6, 7, & 8 affect Transformation Extender
There are multiple vulnerabilities in IBM® Runtime Environments Java™ Technology Edition versions 6, 7, & 8 that are used by Transformation Extender. This issue was disclosed as part of the IBM Java SDK updates in July 2017.
CVE(s): CVE-2017-10102, CVE-2017-10115, CVE-2017-10116
Affected product(s) and affected version(s):
WebSphere Transformation Extender Design Studio
- WebSphere Transformation Extender with Command Server
- WebSphere Transformation Extender for Integration Servers
- WebSphere Transformation Extender for Application Programming
- WebSphere Transformation Extender with Launcher
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2Ap0RBM
X-Force Database: http://ift.tt/2veVuCa
X-Force Database: http://ift.tt/2xsr7ZC
X-Force Database: http://ift.tt/2wyaY8O
The post IBM Security Bulletin: Multiple vulnerabilities in IBM Runtime Environments Java Technology Edition, versions 6, 7, & 8 affect Transformation Extender appeared first on IBM PSIRT Blog.
| Transformation Extender versions | CVEs |
| 9.0.0 – 9.0.0.2 8.4.1 – 8.4.1.5 8.4.0 – 8.4.0.5 8.3.0 – 8.3.0.7 | CVE-2017-10115 CVE-2017-10116 CVE-2017-10102 |
from IBM Product Security Incident Response Team http://ift.tt/2Ap0QxI