IBM96F1BC33B1A4123DC01F7D62CECDF0FF996C1FCB5D658FC2CD55CF7974D3C4FASecurity Bulletin: A potential security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Decision Optimization Center (CVE-2015-0254)
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Summary
IBM WebSphere Application Server is shipped with IBM ILOG Optimization Decision Manager Enterprise, Developer Edition. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin listed in the Remediation/Fixes section.
Affected Products and Versions
IBM ILOG Optimization Decision Manager Enterprise v3.5 - v3.7.0.2
IBM Decision Optimization Center v3.8 - v3.8.0.2
Remediation/Fixes
Refer to the following security bulletins for vulnerability details and information about fixes addressed by IBM WebSphere Application Server which is/are shipped with IBM Decision Optimization Center.
| Principal Product and Version(s) | Affected Supporting Product and Version | Affected Supporting Product Security Bulletin |
|---|---|---|
| IBM ILOG Optimization Decision Manager Enterprise v3.5 - v3.7 | IBM WebSphere Application Server 7.0 | Vulnerability in Apache Standard Taglibs affects IBM WebSphere Application Server (CVE-2015-0254) |
| IBM Decision Optimization Center v3.8 | IBM WebSphere Application Server 8.5.5 |
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P