Security Bulletin: Open Source Oracle Outside In Technology Vulnerabilities in IBM Content Collector for Email

Summary An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technology Outside In Filters component has high confidentiality impact, low integrity impact, and low availability impact. Vulnerability Details CVEID: CVE-2016-5558 DESCRIPTION: An unspecified vulnerabili...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2016 - Includes Oracle Oct 2016 CPU affect Content Collector for IBM Connections (CVE-2016-5582,CVE-2016-5568,CVE-2016-5556,CVE-2016-5573,CVE-2016-5597,CVE-2016-5554,CVE-2016-5542)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2016-5582 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded...

Security Bulletin:IBM SDK, Java Technology Edition Quarterly CPU - Oct 2016 - Includes Oracle Oct 2016 CPU affect IBM Content Collector for Email

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for Email. Vulnerability Details CVEID: CVE-2016-5582 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2016 - Includes Oracle Oct 2016 CPU affect IBM Content Collector for File Systems

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for File Systems Vulnerability Details CVEID: CVE-2016-5582 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded relat...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2016 - Includes Oracle Oct 2016 CPU affect IBM Content Collector for Microsoft SharePoint

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for Microsoft SharePoint Vulnerability Details CVEID: CVE-2016-5582 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedd...

Security Bulletin: Content Collector for Email - OpenSource Oracle Outside In Technology Vulnerabilities (CVE-2015-4808 CVE-2015-6013 CVE-2015-6014 CVE-2015-6015 CVE-2016-0432)

Summary OpenSource Oracle Outside In Technology Vulnerabilities Vulnerability Details CVEID: CVE-2015-4808 DESCRIPTION: An unspecified vulnerability in the Oracle Outside In Technology Outside In Filters component could allow a local or remote attacker to cause a denial of service or possibly...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2016 - Includes Oracle Apr 2016 CPU affect IBM Content Collector for Email

Summary There is vulnerability in IBM® Runtime Environment Java™ Version 6 and Java™ 7 that is used by Content Collector for Email. This issue was disclosed as part of the IBM Java SDK updates in April 2016 Vulnerability Details CVEID: CVE-2016-0264 DESCRIPTION: A buffer overflow vulnerability in...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2016 - Includes Oracle Oct 2016 CPU affect Content Collector for IBM Connections (CVE-2016-5582,CVE-2016-5568,CVE-2016-5556,CVE-2016-5573,CVE-2016-5597,CVE-2016-5554,CVE-2016-5542)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for IBM Connections Vulnerability Details CVEID: CVE-2016-5582 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime Version 7 affect IBM Content Collector for SAP Applications (CVE-2016-3426 CVE-2016-0264)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 that is used by IBM Content Collector for SAP Applications. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability Details CVEID: CVE-2016-3426 DESCRIPTION: An unspecified...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM Content Collector for SAP Applications on Microsoft Windows (CVE-2016-4560)

Summary IBM Content Collector for SAP Applications on Microsoft Windows is affected by a vulnerability caused by InstallAnywhere. Vulnerability Details CVEID: CVE-2016-4560 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges on the system, caused by an...

Security Bulletin:Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Content Collector(CVE-2016-0363 CVE-2016-0376 )

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Version 6 that is used by IBM Content Collector. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability Details CVEID: CVE-2016-0363...

Security Bulletin: Vulnerabilities in GSKit affect IBM Content Collector for SAP Applications (CVE-2015-7421, CVE-2015-7420)

Summary Vulnerabilities were discovered in GSKit. IBM Content Collector for SAP Applications uses GSKit and addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-7421 DESCRIPTION: A vulnerability in GSKit could allow a remote attacker to obtain sensitive information. The internal I...

Security Bulletin: Multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 and 7 affect IBM Content Collector for SAP Applications (CVE-2015-4872, CVE-2015-7575)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 and 7 that is used by IBM Content Collector for SAP Applications. These issues were disclosed as part of the IBM Java SDK updates in October 2015 and January 2016 and include the...

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server affects IBM Content Collector (CVE-2015-2017)

Summary IBM WebSphere Application Server that is used with IBM Content Collector could allow an HTTP response spilitting attack in Channel. Vulnerability Details CVEID: CVE-2015-2017 DESCRIPTION: IBM WebSphere Application Server is vulnerable to HTTP response splitting attacks. A remote attacker...

Security Bulletin: IBM Content Collector affected by vulnerabilities in Oracle Outside In Technology (CVE-2015-4809,CVE-2015-4811,CVE-2015-4877,CVE-2015-4878, CVE-2015-0474,CVE-2015-0493)

Summary Mutiple vulnerabilities are exposed in Oracle Outside In Technology which is used in IBM Content Collector. Vulnerability Details CVE-ID: CVE-2015-4809 Description: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In PDF Export SDK component could allow ...

Security Bulletin:Vulnerability in Apache Commons affects IBM Content Collector (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by IBM Content Collector. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by...

Security Bulletin: Multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 and 7 affect IBM Content Collector for SAP Applications (CVE-2015-2613, CVE-2015-2601, CVE-2015-2625, CVE-2015-1931)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 and 7 that is used by IBM Content Collector for SAP Applications. These issues were disclosed as part of the IBM Java SDK updates in July 2015. Vulnerability Details CVEID: CVE-2015-2613...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Content Collector for SAP Applications (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Content Collector for SAP Applications Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Content Collector for SAP Applications (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Content Collector for SAP Applications. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION:The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Content Collector and IBM CommonStore for Lotus Domino (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah Attack" for SSL/TLS affects IBM Content Collector and IBM CommonStore for Lotus Domino. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive...