IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Cast Iron

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10 FP15 and Version 6 SR16 FP55 used by WebSphere Cast Iron. These issues were disclosed as part of the IBM Java SDK updates in October 2017..

CVE(s): CVE-2017-10356, CVE-2017-10388

Affected product(s) and affected version(s):

WebSphere Cast Iron v 7.5.1.0, 7.5.0.1, 7.5.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22013351
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133785
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133813

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Cast Iron appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2BTwpUy