IBM Security Bulletin: IBM Forms Experience Builder is vulnerable due to Apache Tomcat and Apache Commons FileUpload Vulnerabilities (CVE-2016-3092)

IBM Forms Experience Builder could be susceptible to a denial of service, caused by an error in the Apache Commons FileUpload component.

CVE(s): CVE-2016-3092

Affected product(s) and affected version(s):

IBM Forms Experience Builder 8.5
IBM Forms Experience Builder 8.5.1
IBM Forms Experience Builder 8.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2k93MH4
X-Force Database: http://ift.tt/2bozrA8

from IBM Product Security Incident Response Team http://ift.tt/2k8WRNS