7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
IBM WebSphere Application Server is shipped as a component of IBM Integrated Information Core. Information about a security vulnerability affecting IBM WebSphere Application Server has been identified and published in a security bulletin.
Consult the security bulletin Security Bulletin: Vulnerability in Apache Standard Taglibs affects IBM WebSphere Application Server (CVE-2015-0254) for vulnerability details and information about fixes.
Principal Product and Version(s)
| Affected Supporting Product and Version
—|—
IBM Integrated Information Core V1.4, V1.5 through V1.5.0.2| IBM WebSphere Application Server V7.0
Download the correct version of the fix from the following link: Security Bulletin: Vulnerability in Apache Standard Taglibs affects IBM WebSphere Application Server (CVE-2015-0254) . Installation instructions for the fix are included in the readme document that is in the fix package.