Security Bulletin: A security vulnerability has been identified in multiple products shipped with IBM Predictive Maintenance and Quality (CVE-2015-7575).

Summary

IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM Analytic Server, IBM ILOG CPLEX Optimization Studio, IBM SPSS Statistics, IBM SPSS Modeler and IBM WebSphere MQ are shipped as components of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting : IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM Analytic Server, IBM ILOG CPLEX Optimization Studio, IBM SPSS Statistics, IBM SPSS Modeler and IBM WebSphere MQ has been published in their respective security bulletins.

Vulnerability Details

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio and IBM ILOG CPLEX Enterprise Server (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Please consult the Security Bulletin: Vulnerability in IBM Java SDK affects IBM® DB2® LUW (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect IBM SPSS Analytic Server (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect IBM SPSS Statistics (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java affect IBM SPSS Modeler (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java SDK affect IBM SPSS Collaboration and Deployment Services (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: vulnerabilities in IBM® Java SDK affect WebSphere Application Server January 2016 CPU (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affects IBM WebSphere MQ (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects WebSphere Message Broker and IBM Integration Bus (CVE-2015-7575) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
IBM Predictive Maintenance and Quality 2.0

| IBM Integration Bus V9.0.0.1
IBM DB2 Enterprise Server Edition V10.1.0.3
IBM SPSS Modeler V16.0.0.0
IBM Websphere Application Server V8.5.5.0
IBM WebSphere MQ V7.5.0.2
IBM Predictive Maintenance and Quality 2.5.0| IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.1
IBM DB2 Enterprise Server Edition V10.5.0.4
SPSS Analytic Server V1.0.1.0
IBM SPSS Modeler V16.0.0.1
IBM SPSS Collaboration and Deployment Services V6.0.0.0
IBM Websphere Application Server V8.5.5.3
IBM WebSphere MQ V7.5.0.4
IBM Predictive Maintenance and Quality 2.5.1| IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.1
IBM DB2 Enterprise Server Edition V10.5.0.4
SPSS Analytic Server V2.0
IBM SPSS Modeler V17.0.0.0
IBM SPSS Collaboration and Deployment Services V7.0.0.0
IBM Websphere Application Server V8.5.5.3
IBM WebSphere MQ V7.5.0.4
IBM Predictive Maintenance and Quality 2.5.2| IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.2
IBM DB2 Enterprise Server Edition V10.5.0.5
SPSS Analytic Server V2.0
IBM SPSS Modeler V17.0.0.0
IBM SPSS Collaboration and Deployment Services V7.0.0.1
IBM Websphere Application Server V8.5.5.6
IBM WebSphere MQ V7.5.0.4