IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Process Designer used in IBM Business Process Manager and WebSphere Lombardi Edition

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Process Designer in IBM Business Process Manager and WebSphere Lombardi Edition. These issues were disclosed as part of the IBM Java SDK updates in July 2017.

CVE(s): CVE-2017-10116, CVE-2017-10115, CVE-2017-10053

Affected product(s) and affected version(s):

This vulnerability affects IBM Business Process Manager V7.5.x through V8.5.7 2017.06 and WebSphere Lombardi Edition V7.2.0.x.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zT7uff
X-Force Database: http://ift.tt/2wyaY8O
X-Force Database: http://ift.tt/2xsr7ZC
X-Force Database: http://ift.tt/2wEhie8

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Process Designer used in IBM Business Process Manager and WebSphere Lombardi Edition appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2xsfNxd