IBM Security Bulletin: Vulnerabilities in Apache Struts Affect IBM Emptoris Contract Management and IBM Emptoris Spend (CVE-2016-1181,CVE-2016-1182)

Open Source Apache Struts vulnerabilities affect IBM Emptoris Contract Management and IBM Emptoris Spend

CVE(s): CVE-2016-1181, CVE-2016-1182

Affected product(s) and affected version(s):

IBM Emptoris Contract Management 10.0.0 through 10.1.x
IBM Emptoris Spend 10.0.0 through 10.1.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22013334
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113852
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113853

The post IBM Security Bulletin: Vulnerabilities in Apache Struts Affect IBM Emptoris Contract Management and IBM Emptoris Spend (CVE-2016-1181,CVE-2016-1182) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2EaX3pq