Security Bulletin: IBM Content Classification is affected by a Open Source Commons FileUpload Apache Vulnerabilities

Summary IBM Content Classification has addressed the following vulnerability. Apache Commons FileUpload,could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in the DiskFileItem class of the FileUpload library. A remote attacker could...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Classification

Summary There are multiple vulnerabilities in IBM® SDK Java Technology Edition, Version 6 and IBM® Runtime Environment Java Version 7 used by IBM Content Classification. These issues were disclosed as part of the IBM Java SDK updates in Jul 2017. Vulnerability Details CVEID: CVE-2017-10198...

Security Bulletin: IBM Content Classification is affected by an Open Source Eclipse Jetty Vulnerabilities

Summary IBM Content Classification has addressed the following vulnerability. Jetty could allow a remote attacker to obtain sensitive information, caused by a timing channel flaw in util/security/Password.java. By observing elapsed times before rejection of incorrect passwords, an attacker could...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Classification

Summary There are multiple vulnerabilities in IBM® SDK Technology Edition, Version 6 and Version 7 that is used by IBM Content Classification. IBM Content Classification has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK updates in Apr 2017. Vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Classification

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Version 7 used by Content Classification.These issues were disclosed as part of the IBM Java SDK updates in October 2016. Vulnerability Details CVEID: CVE-2016-5582...

Security Bulletin: Content Classification is affected by Open Source Apache Xerces-C XML parser Vulnerability (CVE-2016-0729)

Summary Content Classification is affected by Open Source Apache Xerces-C XML parser Vulnerability. Vulnerability Details CVEID: CVE-2016-0729 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking during processing and error...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM Content Classification (CVE-2016-3443 and CVE-2016-3422)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6.0 that is used by IBM Content Classification. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability Details CVEID: CVE-2016-3443 DESCRIPTION: An unspecified vulnerability ...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM Content Classification (CVE-2016-0494, CVE-2016-0466 and CVE-2016-0603)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6.0 that is used by IBM Content Classification. These vulnerabilities have different impacts and different levels of risk. Vulnerability Details CVEID: CVE-2016-0494 DESCRIPTION: An unspecifie...

Security Bulletin: Vulnerabilities in Content Classification due to security vulnerabilities in Oracle Outside In Technology and Oracle Java Development Kits

Summary Security vulnerabilities in Oracle Outside In Technology and Oracle Java Development Kits JDKs can affect the security of IBM Content Classification, also known as IBM InfoSphere Classification Module. Vulnerability Details CVE ID: CVE-2013-5791 . DESCRIPTION: The Oracle Outside In...

Security Bulletin: Vulnerability in IBM Content Classification (CVE-2013-5879, CVE-2014-0411)

Summary CVE-2013-5879 Oracle Outside In Technology Outside In Maintenance unauthorized access CVE-2014-0411 A vulnerability exists in IBM SDK Java™ Technology Edition Version 6 that is shipped with IBM Content Classification. It is related to the Java™ Secure Socket Extension component...