Security Bulletin: Multiple security vulnerabilities has been identified in Websphere Application Server shipped with Tivoli Common Reporting (CVE-2016-3485, CVE-2016-3092, CVE-2016-0377, CVE-2016-0385, CVE-2016-5986)

Summary

Embedded Websphere Application Server (eWAS) v7.0.x is shipped as a component of Tivoli Common Reporting (TCR v2.1 and v2.1.1). The version of eWAS has been affected by multiple security vulnerabilities, as described below.

Affected Products and Versions

Tivoli Common Reporting 2.1

Tivoli Common Reporting 2.1.1

Remediation/Fixes

TCR Version

| Bundling bulletin
—|—
2.1| <http://www-01.ibm.com/support/docview.wss?uid=swg21990905&gt;
2.1.1| <http://www-01.ibm.com/support/docview.wss?uid=swg21990905&gt;