IBM Security Bulletin: Vulnerabilities in Apache POI affects IBM InfoSphere Information Server

Apache POI vulnerabilities were addressed by IBM InfoSphere Information Server.

CVE(s): CVE-2012-0213, CVE-2014-3574, CVE-2014-3529, CVE-2014-9527, CVE-2016-5000

Affected product(s) and affected version(s):

The following products, running on all supported platforms, are affected:
IBM InfoSphere Information Server: versions 9.1, 11.3, and 11.5
IBM InfoSphere Metadata Workbench: versions 8.7, and 9.1
IBM InfoSphere Information Governance Catalog: versions 11.3, and 11.5
IBM InfoSphere Information Server on Cloud: version 11.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2k91x6F
X-Force Database: http://ift.tt/2dFdUrV
X-Force Database: http://ift.tt/2cOGReI
X-Force Database: http://ift.tt/2cOIhpQ
X-Force Database: http://ift.tt/2dFfcmC
X-Force Database: http://ift.tt/2dFewhf

from IBM Product Security Incident Response Team http://ift.tt/2k8Wl2r