IBM Security Bulletin:Multiple security vulnerabilities in Open Source Apache Tomcat affect IBM Cognos Business Viewpoint (CVE-2016-0714 , CVE-2015-5174)

There are multiple vulnerabilities in Open Source Apace Tomcat that is used by IBM Cognos Business Viewpoint. These were disclosed in the 02/22/2016 X-Force Reports. IBM Cognos Business Viewpoint has addressed the applicable CVEs.

CVE(s): CVE-2016-0714, CVE-2015-5174

Affected product(s) and affected version(s):

IBM Cognos Business Viewpoint 10.1 FP1
IBM Cognos Business Viewpoint 10.1.1 FP2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1PHTDOU
X-Force Database: http://ift.tt/1rhWvqf
X-Force Database: http://ift.tt/1rhWylT

from IBM Product Security Incident Response Team http://ift.tt/1ZxPcGH