IBM Security Bulletin: Vulnerabilities in 3RD PARTY XSS in IBM WebSphere CacheMonitor

There are vulnerabilities in 3RD PARTY XSS in IBM WebSphere CacheMonitor used by IBM Streams. IBM Streams has addressed the applicable CVEs.

CVE(s): CVE-2018-1767

Affected product(s) and affected version(s):

Affected InfoSphere Streams	Affected Versions
InfoSphere Streams	4.0.1.6 and earlier
InfoSphere Streams	3.2.1.6 and earlier
IBM Streams	4.1.1.7 and earlier
IBM Streams	4.2.1.5 and earlier
IBM Streams	4.3.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10794139
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148621

The post IBM Security Bulletin: Vulnerabilities in 3RD PARTY XSS in IBM WebSphere CacheMonitor appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2FejMCy