IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MessageSight
There are multiple vulnerabilities in IBM® Runtime Environment Java
Version 7.1 and 8.0 used by IBM MessageSight. These issues were disclosed as part of the IBM Java SDK updates in July 2018.
CVE(s): CVE-2018-1656, CVE-2018-2973, CVE-2018-2940, CVE-2018-12539
Affected product(s) and affected version(s):
IBM MessageSight | v1.2 – 1.2.0.3 |
IBM MessageSight | v2.0 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10735421
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144882
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146803
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148389
The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MessageSight appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/2q65k8x