Security Bulletin: Vulnerability in Apache CXF affects WebSphere Application Server that is installed with IBM SPSS Analytic Server (CVE-2019-12406)

Jun 4, 2020 8:00 pm EDT

Categorized: Medium Severity

Share this post:

There is a denial of service in the Apache CXF library used by WebSphere Application Server. This has been addressed.

Affected product(s) and affected version(s):

 

Principal Product and Version(s)	Affected Supporting Product and Version
IBM SPSS Analytic Server 3.0 IBM SPSS Analytic Server 2.1 IBM SPSS Analytic Server 2.0	IBM WebSphere Application Server Liberty 17.0.0.3 – 20.0.0.1 IBM WebSphere Application Server 9.0

 

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6220246

from IBM Product Security Incident Response Team https://ift.tt/3eSiz4a