IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM® Java Runtime affects IBM BigFix Compliance Analytics. (CVE-2016-3485, CVE-2016-3498, CVE-2016-3552, CVE-2016-3503)

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 Service Refresh 3 and IBM® Runtime Environment Java™ Version 8 Service Refresh 3 that is used by IBM BigFix Compliance Analytics. These issues were disclosed as part of the IBM Java SDK updates in July 2016.

CVE(s): CVE-2016-3485, CVE-2016-3498, CVE-2016-3552, CVE-2016-3503

Affected product(s) and affected version(s):

IBM BigFix Security Compliance Analytics 1.8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hxIyE1
X-Force Database: http://ift.tt/2b7G65u
X-Force Database: http://ift.tt/2bTqVZ8
X-Force Database: http://ift.tt/2ctoPUY
X-Force Database: http://ift.tt/2bTrbY9

from IBM Product Security Incident Response Team http://ift.tt/2hACho6