Security Bulletin: Security vulnerabilities in Dojo and jQuery might affect IBM Business Automation Workflow and IBM Business Process Manager (BPM)

Security vulnerabilities have been reported for Dojo and jQuery version shipped with IBM Business Automation Workflow and IBM BPM.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Business Automation Workflow	V19.0 V18.0
IBM Business Process Manager	V8.6 V8.5 V8.0

For earlier and unsupported versions of the products, IBM recommends upgrading to a fixed, supported version of the product.

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6155493

The post Security Bulletin: Security vulnerabilities in Dojo and jQuery might affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2xbOT1F