IBM Security Bulletin: IBM Connections Security Refresh (CVE-2017-1682)

IBM Connections contains possible cross-site scripting vulnerability, see details below for remediation information.

CVE(s): CVE-2017-1682

Affected product(s) and affected version(s):

The following versions of IBM Connections are impacted:

IBM Connections 6.0
IBM Connections 5.5
IBM Connections 5.0
IBM Connections 4.5
IBM Connections 4.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22012900
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134004

The post IBM Security Bulletin: IBM Connections Security Refresh (CVE-2017-1682) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2BXs3vx