Security Bulletin: Multiple vulnerabilities that have been identified in IBM HTTP Server shipped with WebSphere Application Server may affect WebSphere Process Server

Summary

WebSphere Application Server is shipped as a component of WebSphere Process Server. Information about security vulnerabilities affecting IBM HTTP server shipped with WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Please consult the security bulletins

• Security Bulletin: HTTP Request smuggling vulnerability may affect IBM HTTP Server (CVE-2015-3183)
• Security Bulletin: Denial of service may affect IBM HTTP Server (CVE-2015-1283)
  for vulnerability details and information about fixes.

Affected Products and Versions

• WebSphere Process Server 7.0.x
• WebSphere Process Server Hypervisor Editions V7.0

General support for WebSphere Process Server ended 2015-04-30. Hypervisor editions are still in support until 2015-09-30. You are strongly advised to upgrade to a supported product such as IBM Business Process Manager Advanced Edition.

Workarounds and Mitigations

None