IBM Security Bulletin: IBM WebSphere Dashboard Framework is affected by a security vulnerability in Apache POI (CVE-2016-5000)

Apache POI, which is bundled with IBM WebSphere Dashboard Framework, could allow a remote attacker to obtain sensitive information.

CVE(s): CVE-2016-5000

Affected product(s) and affected version(s):

WebSphere Dashboard Framework 7.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dS47yW
X-Force Database: http://ift.tt/2dFewhf

from IBM Product Security Incident Response Team http://ift.tt/2cZxAAH