IBM Security Bulletin:Vulnerability in Apache Poi Affects IBM Emptoris Sourcing and IBM Emptoris Contract Management (CVE-2017-5644)

Open Source Apache Poi vulnerability affects IBM Emptoris Sourcing and IBM Emptoris Contract Management

CVE(s): CVE-2017-5644

Affected product(s) and affected version(s):

IBM Emptoris Sourcing 10.0.0 through 10.1.x

IBM Emptoris Contract Management 10.0.0 through 10.1.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22012515
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/123699

The post IBM Security Bulletin:Vulnerability in Apache Poi Affects IBM Emptoris Sourcing and IBM Emptoris Contract Management (CVE-2017-5644) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2E7z5eA