Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Database

Summary

These potential security vulnerabilities exist in all versions of IBM OpenPages GRC Platform with Database: See Vulnerability Details for CVE IDs.

Vulnerability Details

Customers who have IBM OpenPages GRC Platform with Database are potentially impacted by these vulnerabilities.

CVEID: CVE-2016-0467**
DESCRIPTION:** An unspecified vulnerability in Oracle Database Server related to the Security component has no confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109781 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:S/C:N/I:P/A:N)

CVEID: CVE-2016-0499**
DESCRIPTION:** An unspecified vulnerability in Oracle Database Server related to the Java VM component has complete confidentiality impact, complete integrity impact, and complete availability impact.
CVSS Base Score: 9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109777 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C)

Affected Products and Versions

IBM OpenPages GRC Platform with Database 6.2.0
IBM OpenPages GRC Platform with Database 6.2.1
IBM OpenPages GRC Platform with Database 7.0

Remediation/Fixes

The following interim fix addresses all vulnerabilities in all affected OpenPages GRC Platform with Database versions. Download and install the release as soon as practical. The fix and installation instructions are provided at the URL listed below:

Workarounds and Mitigations

None, apply update.