Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server bundled with WebSphere Dynamic Process Edition

Summary

WebSphere Business Modeler, WebSphere Integration Developer, WebSphere Business Services Fabric, WebSphere Process Server and WebSphere Business Monitor are shipped as components of WebSphere Dynamic Process Edition. WebSphere Application Server is the base for the server side products in the bundle and is often used with IBM HTTP Server.
Information about security vulnerabilities affecting IBM HTTP Server have been published in security bulletins.

Affected Products and Versions

WebSphere Dynamic Process Edition V7.0

If you are using an unsupported version, IBM strongly recommends to upgrade.

Remediation/Fixes

Please consult the security bulletins

• Security Bulletin: HTTP Request smuggling vulnerability may affect IBM HTTP Server (CVE-2015-3183)
• Security Bulletin: Denial of service may affect IBM HTTP Server (CVE-2015-1283)
  for vulnerability details and information about fixes.

Workarounds and Mitigations

None