Lucene search

K
ibmIBM9CAA5D9B64E098CDF53ED1BE6F955A2FF716164AE82443CC2EB44E4B2571E4CC
HistoryJun 28, 2021 - 3:31 p.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-20492)

2021-06-2815:31:42
www.ibm.com
5

Summary

IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager versions 4.2.0, 4.1.1. and 3.9. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
ITNM 4.2.0.x
ITNM 4.1.1.x
ITNM 3.9

Remediation/Fixes

Affected Product(s) Version(s) Remediation
ITNM 4.2.0.x

WebSphere Application Server Java Batch is vulnerable to an XML External Entity Injection (XXE) vulnerability

See section: For V8.5.0.0 through 8.5.5.19:

ITNM| 4.1.1.x|

WebSphere Application Server Java Batch is vulnerable to an XML External Entity Injection (XXE) vulnerability

See section: For V8.5.0.0 through 8.5.5.19:

ITNM| 3.9|

WebSphere Application Server Java Batch is vulnerable to an XML External Entity Injection (XXE) vulnerability

See section: For V8.5.0.0 through 8.5.5.19:

Workarounds and Mitigations

None

Related for 9CAA5D9B64E098CDF53ED1BE6F955A2FF716164AE82443CC2EB44E4B2571E4CC