Security Bulletin: Multiple security vulnerabilities have been identified in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2015-7454, CVE-2015-7400, CVE-2015-7407)

Summary

IBM Business Process Manager is shipped as a component of IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition. Information about multiple security vulnerabilities affecting IBM Business Process Manager have been published in a security bulletin.

Vulnerability Details

Review the Security Bulletin: Multiple security vulnerabilities in Business Space affect IBM Business Process Manager and WebSphere Process Server for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
IBM Cloud Orchestrator V2.5, V2.5.0.1,V2.4.0.3 | IBM Business Process Manager Standard V8.5.6
IBM Cloud Orchestrator Enterprise Edition V2.5, V2.5.0.1, V2.4.0.3 | IBM Business Process Manager Standard V8.5.6
IBM Cloud Orchestrator V2.4, V2.4.0.1, V2.4.0.2| IBM Business Process Manager Standard V8.5.0.1
IBM Cloud Orchestrator Enterprise Edition V2.4, V2.4.0.1, V2.4.0.2 | IBM Business Process Manager Standard V8.5.0.1
IBM SmartCloud Orchestrator V2.3, v2.3.0.1, and V2.3.0.1 and V2.3.0.1 from Interim Fix1 through Interim Fix 9| IBM Business Process Manager Standard V8.5
IBM SmartCloud Orchestrator Enterprise Edition V2.3, v2.3.0.1 and V2.3.0.1 from Interim Fix1 through Interim Fix 9| IBM Business Process Manager Standard V8.5

Workarounds and Mitigations

None