Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2017-1121)

Summary

WebSphere Application Server is shipped as a component of IBM Security Identity Manager. Information about a security vulnerability affecting IBM Security Identity Manager has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Potential Cross-site scripting vulnerability in WebSphere Application Server for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
IBM Security Identity Manager version 6.0 and IBM Tivoli Identity Manager version 5.1| IBM Websphere Application Server 7.0, 8.0, 8.5 and 8.5.5