IBM Security Bulletin: Multiple vulnerabilities affect Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio (CVE-2017-10115, CVE-2017-10116)

Security vulnerabilities have been identified in IBM® Runtime Environment Java™ Technology Edition that is used by Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio.

CVE(s): CVE-2017-10115, CVE-2017-10116

Affected product(s) and affected version(s):

These vulnerabilities apply to the following products and versions:

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zzhfBU
X-Force Database: http://ift.tt/2xsr7ZC
X-Force Database: http://ift.tt/2wyaY8O

The post IBM Security Bulletin: Multiple vulnerabilities affect Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio (CVE-2017-10115, CVE-2017-10116) appeared first on IBM PSIRT Blog.

Affected Product	Affected Versions	Applicable Vulnerabilities
Watson Explorer Foundational Components	11.0.0.0 – 11.0.0.3, 11.0.1, 11.0.2, 11.0.2.1	CVE-2017-10115 CVE-2017-10116
Watson Explorer Foundational Components	10.0.0.0 – 10.0.0.4	CVE-2017-10115 CVE-2017-10116
Watson Explorer Foundational Components	9.0.0.0 – 9.0.0.8	CVE-2017-10115 CVE-2017-10116
Watson Explorer Foundational Components	8.2 – 8.2-6	CVE-2017-10115 CVE-2017-10116
IBM Watson Explorer Foundational Components Annotation Administration Console	11.0 – 11.0.0.3, 11.0.1, 11.0.2, 11.0.2.1	CVE-2017-10115 CVE-2017-10116
IBM Watson Explorer Foundational Components Annotation Administration Console	10.0 – 10.0.0.4	CVE-2017-10115 CVE-2017-10116
Watson Explorer Analytical Components	11.0.0.0 – 11.0.0.3, 11.0.1, 11.0.2, 11.0.2.1	CVE-2017-10115 CVE-2017-10116
Watson Explorer Analytical Components	10.0.00 – 10.0.0.4	CVE-2017-10115 CVE-2017-10116
IBM Watson Content Analytics	3.5.0.0 – 3.5.0.4	CVE-2017-10115 CVE-2017-10116
IBM Watson Explorer Content Analytics Studio	11.0.0.0 – 11.0.0.3, 11.0.1, 11.0.2, 11.0.2.1	CVE-2017-10115 CVE-2017-10116

from IBM Product Security Incident Response Team http://ift.tt/2hm8pgm