IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by XML External Entity Injection and External Service Interaction vulnerabilities (CVE-2016-9691, CVE-2016-9692)

May 2, 2017 10:00 am EDT

Categorized: High Severity

There are XML External Entity Injection and External Service Interaction vulnerabilities reported in WebSphere Cast Iron Solution. WebSphere Cast Iron Solution has remediated the affected versions.

CVE(s): CVE-2016-9691, CVE-2016-9692

Affected product(s) and affected version(s):

WebSphere Cast Iron Solution v 7.5.1.0, v 7.5.0.1, v 7.5.0.0
WebSphere Cast Iron Solution v 7.0.0.2, v 7.0.0.1, v 7.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ps0VNN
X-Force Database: http://ift.tt/2qu5qG3
X-Force Database: http://ift.tt/2ps6USG

from IBM Product Security Incident Response Team http://ift.tt/2qu4zVP