IBM Security Bulletin: IBM Web Experience Factory is affected by a security vulnerability in Apache POI (CVE-2017-5644)

Apache POI, which is bundled with IBM Web Experience Factory, could allow a remote attacker to launch a denial of service attack.

CVE(s): CVE-2017-5644

Affected product(s) and affected version(s):

Web Experience Factory 8.0

Web Experience Factory 8.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2rYpu35
X-Force Database: http://ift.tt/2r0y7x3

The post IBM Security Bulletin: IBM Web Experience Factory is affected by a security vulnerability in Apache POI (CVE-2017-5644) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2rYxqS9