IBM Security Bulletin: Vulnerabilities in Oracle Outside In Technology affect IBM WebSphere Portal (CVE-2017-10141, CVE-2017-10196)

Oracle Outside In Technology is used by and contained in IBM WebSphere Portal. A fix is available for security vulnerabilities in Oracle Outside In Technology that affect IBM WebSphere Portal (CVE-2017-10141, CVE-2017-10196).

CVE(s): CVE-2017-10196, CVE-2017-10141

Affected product(s) and affected version(s):

For unsupported versions IBM recommends upgrading to a fixed, supported version of the product.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zbep68
X-Force Database: http://ift.tt/2ha9YSa
X-Force Database: http://ift.tt/2zbA7XA

The post IBM Security Bulletin: Vulnerabilities in Oracle Outside In Technology affect IBM WebSphere Portal (CVE-2017-10141, CVE-2017-10196) appeared first on IBM PSIRT Blog.

Affected ProductAffected Versions
IBM WebSphere Portal9.0.0.0 – 9.0.0.0 CF14
IBM WebSphere Portal8.5.0.0 – 8.5.0.0 CF14
IBM WebSphere Portal8.0.0.0 – 8.0.0.1 CF22
IBM WebSphere Portal7.0.0.0 – 7.0.0.2 CF30


from IBM Product Security Incident Response Team http://ift.tt/2ha9Yl8