Security Bulletin: Vulnerabilities in JAR files affect Transparent Cloud Tiering in IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in multiple JAR files affect Transparent Cloud Tiering in IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products. The vulnerabilities are not thought to be exploitable but IBM recommends upgrade for users of Transparent Cloud Tiering...

CVE-2014-125087 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2014-125087

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

CVE-2014-125087

CVE-2014-125087 affects java-xmlbuilder up to 1.1. The issue is an XML External Entity (XXE) reference in the XML parser handling, allowing potentially disclosure of sensitive files. A fix is available in version 1.2, with patch name e6fddca201790abab4f2c274341c0bb8835c3e73. Upgrading the affecte...