IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MessageSight

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.1 used by IBM MessageSight. These issues were disclosed as part of the IBM Java SDK updates in April 2018.

CVE(s): CVE-2018-2825, CVE-2018-2783, CVE-2018-2826

Affected product(s) and affected version(s):

IBM MessageSight

v1.2 – 1.2.0.3

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22016827
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141981
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141939
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141982

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MessageSight appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2KqXDSL