IBM Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server affects IBM Emptoris Strategic Supply Management suite of products and IBM Emptoris Services Procurement (CVE-2017-1583, CVE-2011-4343)

The IBM Emptoris Contract Management ,IBM Emptoris Program Management, IBM Emptoris Sourcing, IBM Emptoris Spend Analysis and IBM Emptoris Services Procurement products are affected by a vulnerability that exists in the IBM WebSphere Application Server. The security bulletin includes issues disclosed as part of the IBM WebSphere Application Server updates.

CVE(s): CVE-2017-1583, CVE-2011-4343

Affected product(s) and affected version(s):

IBM Emptoris Program Management 10.0.0 through 10.1.x

IBM Emptoris Sourcing 10.0.0 through 10.1.x
IBM Emptoris Contract Management 10.0.0 through 10.1.x
IBM Emptoris Spend Analysis 10.0.0 through 10.1.x
IBM Emptoris Services Procurement 10.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zv4j0O
X-Force Database: http://ift.tt/2gVtBtY
X-Force Database: http://ift.tt/2ioSn9c

The post IBM Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server affects IBM Emptoris Strategic Supply Management suite of products and IBM Emptoris Services Procurement (CVE-2017-1583, CVE-2011-4343) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2mVzs7H