Security Bulletin: Content Manager Services for Lotus Quickr (CVE-2016-3092)

Summary IBM Lotus Quickr Connectors bundled in IBM Content Navigator's Collaboration Services is affected by an Apache Commons File Upload vulnerability. IBM Lotus Quickr has resolved this vulnerability Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION:Apache Tomcat is vulnerable to a denial...

Security Bulletin: Security vulnerability in Apache Commons File Upload affects IBM Rational Quality Manager (CVE-2014-0050)

Summary IBM Rational Quality Manage ships with the Apache Commons File Upload library which contains a security vulnerability that could potentially be exploited to cause a denial of service attack. Vulnerability Details | Subscribe to My Notifications to be notified of important product support...

Oracle WebLogic Server Java Object Deserialization RCE (October 2016 CPU)

The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WLS Security component due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons File Upload library. An unauthenticated, remote attacker can exploit this, via a crafted a...

Oracle WebLogic Portal Apache Commons File Upload (January 2016 CPU)

Binary data oracleweblogicportalcpujan2016.nbin...

Fixed in Apache Tomcat 7.0.40

Moderate: Information disclosure CVE-2013-2071 Bug 54178 described a scenario where elements of a previous request may be exposed to a current request. This was very difficult to exploit deliberately but fairly likely to happen unexpectedly if an application used AsyncListeners that threw...