IBM Security Bulletin: Vulnerabilities in the Java runtime environment that IBM provides affect WebSphere DataPower XC10 Appliance

Dec 22, 2018 9:00 am EST

Categorized: Medium Severity

Share this post:

There are vulnerabilities in IBM® Runtime Environment Java™ Version 7 that affect the WebSphere DataPower XC10 Appliance. The issues were disclosed as part of the IBM SDK, Java™ Technology Edition updates in July and October 2018.

CVE(s): CVE-2018-2973, CVE-2018-3180

Affected product(s) and affected version(s):

WebSphere DataPower XC10 Appliance Version 2.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10791861
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497

from IBM Product Security Incident Response Team https://ibm.co/2CvAwoR