Security Bulletin: Vulnerabilities exist in Watson Explorer Analytical Components, Watson Explorer Annotation Administration Console, Watson Content Analytics, IBM Content Analytics, and OmniFind Enterprise Edition

Summary Security vulnerabilities have been identified in IBM Watson Explorer Analytical Components, Watson Explorer Foundational Components Annotation Administration Console, IBM Watson Content Analytics, IBM Content Analytics, and OmniFind Enterprise Edition. Not all vulnerabilites affect all...

Security Bulletin: Multiple libarchive vulnerabilities affect Watson Explorer

Summary Multiple libarchive vulnerabilities affect Watson Explorer. Vulnerability Details CVEID: CVE-2015-8915 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by an invalid memory read in CPIO parser. By reading a specially-crafted CPIO file, a remote attacker could exploit...

Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-2107)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by the Watson Explorer Foundational Components. Watson Explorer has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Watson Explorer Advanced Edition (CVE-2016-3426)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8, which is used by IBM Watson Explorer. Vulnerability Details CVEID: CVE-2016-3426 DESCRIPTION: An unspecified vulnerability related to the Java Cryptography Extension JCE component could allow a remo...

Security Bulletin: Vulnerability in Flexera InstallAnywhere affects Watson Explorer and Watson Content Analytics (CVE-2016-4560)

Summary Some components of this product include a version of Flexera InstallAnywhere that could allow a remote attacker to execute arbitrary code on the system. This vulnerability can be avoided by following the instructions included in this bulletin. Vulnerability Details CVEID: CVE-2016-4560...

Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-0702)

Summary A vulnerability in OpenSSL affects Watson Explorer. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular...

Security Bulletin: Vulnerabilities in Open SSL affect Watson Explorer (CVE-2016-0701 and CVE-2015-3197)

Summary Two vulnerabilities in OpenSSL affect Watson Explorer. Vulnerability Details CVEID: CVE-2016-0701 DESCRIPTION: The DHcheckpubkey function in crypto/dh/dhcheck.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman DH key exchange, which make...

Security Bulletin: Vulnerabilities in IBM Java Runtime affect Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition (CVE-2015-7575, CVE-2015-4872)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition that is used by Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security...

Security Bulletin: Vulnerability in Apache Commons affects Watson Explorer and Watson Content Analytics (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by Watson Explorer and Watson Content Analytics. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collections could allow a remote attacker to execute arbitrary code on...

Security Bulletin: Vulnerability in RC4 stream cipher affects Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" attack for SSL/TLS affects Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain...

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...