IBM Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2016-5007, CVE-2016-9878)

The product includes vulnerable components (e.g., framework libraries) that may be identified and exploited with automated tools.

CVE(s): CVE-2016-5007, CVE-2016-9878

Affected product(s) and affected version(s):

IBM QRadar 7.3.0 to 7.3.1 Patch 2

IBM QRadar 7.2.0 to 7.2.8 Patch 11

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015813
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/126679
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/120241

The post IBM Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2016-5007, CVE-2016-9878) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2HsGJSl