Security Bulletin: Vulnerability in IBM Java SDK affect IMS™ Enterprise Suite: Connect API for Java, Explorer for Development, and SOAP Gateway (CVE-2015-7575).

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, 6.0.16.15 and earlier, 6.1.8.15 and earlier, 7.0.9.20 and earlier, 7.1.3.20 and earlier, 8.0.2.0 and earlier that is used by IMS™ Enterprise Suite: Connect API for Java, Explorer for Development, SOAP Gateway. This issue was...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Service Tester. Rational Service Tester has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2021-35578 DESCRIPTION: An...

Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM Netezza Analytics for NPS

Summary IBM Java SDK is used by IBM Netezza Analytics for NPS. IBM Netezza Analytics for NPS has addressed the applicable CVEs by upgrading IBM Java SDK to version 8.0-6.15. Vulnerability Details CVEID: CVE-2018-3136 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java...

Security Bulletin: Vulnerability in IBM Java SDK Runtime affects DS8000 (CVE-2015-0138)

Summary The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects some versions of DS8000. Vulnerability Details CVEID: CVE-2015-0138 DESCRIPTION: A vulnerability in SSL/TLS implementations could allow a remote attacker to downgrade the security of certain...

Security Bulletin:Multiple vulnerabilities in IBM Java SDK affect System Storage DS8000

Summary Multiple vulnerabilities exisit in the IBM JRE used by System Storage DS8000. These were disclosed as part of the IBM Java SDK updates - July 2015 This release also enforces the removal of RC4 in IBM JAVA CVE-2015-2808 also known as BarMitzva to ensure that no present or future releases c...

com.ibm.watson.developer_cloud:java-sdk (>=2.6.0, <=2.7.0), net.wasdev.wlp.starters.watsonsdk:compile-pom (0.0.1) potentially affected by CVE-2017-1000209 via com.neovisionaries:nv-websocket-client (1.19)

com.neovisionaries:nv-websocket-client MAVEN version 1.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.neovisionaries:nv-websocket-client and may be impacted: - com.ibm.watson.developercloud:java-sdk =2.6.0, =2.7.0 -...

com.ibm.watson.developer_cloud:java-sdk (>=2.7.1, <=2.8.0) potentially affected by CVE-2017-1000209 via com.neovisionaries:nv-websocket-client (1.21)

com.neovisionaries:nv-websocket-client MAVEN version 1.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.neovisionaries:nv-websocket-client and may be impacted: - com.ibm.watson.developercloud:java-sdk =2.7.1, =2.8.0 Source cves: CVE-2017-1000209...

com.ibm.watson.developer_cloud:java-sdk (>=2.9.0, <=2.10.0), net.wasdev.wlp.starters.watsonsdk:compile-pom (>=0.0.2, <=0.0.4) potentially affected by CVE-2017-1000209 via com.neovisionaries:nv-websocket-client (1.22)

com.neovisionaries:nv-websocket-client MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on com.neovisionaries:nv-websocket-client and may be impacted: - com.ibm.watson.developercloud:java-sdk =2.9.0, =0.0.2, =0.0.4 Source cves:...

Security Bulletin: Flex System Manager (FSM) – June 2013 Java Vulnerabilities

Summary Multiple security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM FSM. Vulnerability Details Abstract Multiple security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM FSM. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-2468 CVSS Base Score:Â...

Security Bulletin: A vulnerability in IBM Java SDK affects IBM Standards Processing Engine and IBM Transformation Extender Advanced (CVE-2016-5597)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 7 and 8, that is used by IBM Standards Processing Engine and IBM Transformation Extender Advanced. This issue was disclosed as part of the IBM Java SDK updates for October 2016. Vulnerability Details CVEID: CVE-2016-55...

Security Bulletin: A vulnerability in IBM Java SDK affects IBM Standards Processing Engine and IBM Transformation Extender Advanced (CVE-2015-4872)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 7 and 8, that is used by IBM Standards Processing Engine and IBM Transformation Extender Advanced. This issue was disclosed as part of the IBM Java SDK updates for October 2015. Vulnerability Details CVEID: CVE-2015-48...

GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

com.cloudbees.jenkins.plugins:xpdev (1.0), com.cloudbees.plugins:build-flow-plugin (0.4) +50 more potentially affected by CVE-2017-1000393 via org.jenkins-ci.main:jenkins-core (1.447)

org.jenkins-ci.main:jenkins-core MAVEN version 1.447 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:xpdev 1.0 - com.cloudbees.plugins:build-flow-plugin 0.4 -...

com.amazonaws:codedeploy (1.15), com.blackducksoftware.integration:blackduck-detect (>=1.0.0, <=1.2.0) +48 more potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (1.580.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy 1.15 - com.blackducksoftware.integration:blackduck-detect =1.0.0,...

Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect Cloud Pak System

Summary Multiple Vulnerabilities have been found in IBM Java SDK that is shipped with Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities in the IBM SDk October 2021 CPU update, which includes the IBM SDK April and July 2021 CPU updates. Vulnerability Details...

Security Bulletin: Apache Log4j (CVE-2021-44228) vulnerability in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) and IBM Security Guardium Key Lifecycle Manager

Summary WebSphere Application Server WAS is shipped as a component of IBM Security Guardium Key Lifecycle Manager GKLM. Information about the Apache Log4j vulnerability has been published in a security bulletin. Customers are encouraged to take quick action to update their systems. Vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM InfoSphere Master Data Management Server (CVE-2016-2108 CVE-2016-2107 CVE-2016-2105 CVE-2016-2106 CVE-2016-2109 CVE-2016-2176)

Summary IBM WebSphere Application Server is shipped as a component of IBM InfoSphere Master Data Management Server . Information about a security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bullet...

Security Bulletin: Vulnerability in IBM Java SDK affects IBM InfoSphere Global Name Management (CVE-2020-14781)

Summary IBM InfoSphere Global Name Management GNM 6.0 contains a version of Java with a low-impact vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphere Global...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Global Name Management 5.0 (CVE-2014-4263) and (CVE-2014-4244)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6.0 that is used by IBM WebSphere Application Server embedded in IBM InfoSphere Global Name Management. These issues were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details CVEI...