IBM Security Bulletin: Multiple Security Vulnerabilities in Apache Axis Affect IBM Sterling B2B Integrator (CVE-2014-3596, CVE-2012-5784)

IBM Sterling B2B Integrator uses ActiveMQ. ActiveMQ uses Axis and is vulnerable.

CVE(s): CVE-2012-5784, CVE-2014-3596

Affected product(s) and affected version(s):

IBM Sterling B2B Integrator 5.2.0.1 – 5.2.6.3

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10728839
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/79829
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/95377

The post IBM Security Bulletin: Multiple Security Vulnerabilities in Apache Axis Affect IBM Sterling B2B Integrator (CVE-2014-3596, CVE-2012-5784) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2LzQG1A