Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with Predictive Customer Intelligence (CVE-2016-0385, CVE-2016-0377, CVE-2016-2960, CVE-2016-3092)

Summary

WebSphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting WebSphere Application Server have been published in security bulletins.

Vulnerability Details

Refer to the security bulletins listed in the Remediation/Fixes section.

Affected Products and Versions

Predictive Customer Intelligence 1.0,

Predictive Customer Intelligence 1.0.1,

Predictive Customer Intelligence 1.1,

Predictive Customer Intelligence 1.1.1

Remediation/Fixes

Principal Product and Version(s)

| Affected Supporting Product and Version| Affected Supporting Product Security Bulletin
—|—|—
Predictive Customer Intelligence 1.0 and 1.0.1| WebSphere Application Server 8.5.5| Bypass security restrictions in WebSphere Application Server (CVE-2016-0385)

Information Disclosure in IBM WebSphere Application Server in the Admin Console (CVE-2016-0377)

Potential denial of service with SIP Services (CVE-2016-2960)

Apache Commons FileUpload Vulnerability affects WebSphere Application Server (CVE-2016-3092)

Predictive Customer Intelligence 1.1 and 1.1.1| WebSphere Application Server 8.5.5.6| Bypass security restrictions in WebSphere Application Server (CVE-2016-0385)

Information Disclosure in IBM WebSphere Application Server in the Admin Console (CVE-2016-0377)

Potential denial of service with SIP Services (CVE-2016-2960)

Apache Commons FileUpload Vulnerability affects WebSphere Application Server (CVE-2016-3092)