IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by Host On-Demand. Host On-Demand has addressed the applicable CVEs.

CVE(s): CVE-2018-2964, CVE-2018-2973, CVE-2018-2940, CVE-2018-1517, CVE-2016-0705, CVE-2017-3732, CVE-2017-3736

Affected product(s) and affected version(s):

  • Host On-Demand: 12.0 , 12.0.1, 12.0.2, 12.0.3 and 12.0.4
  • Host On-Demand: 13.0 ,13.0.1 and 13.0.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10735515
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146827
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146803
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111140
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/121313
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team https://ift.tt/2FvkTkD