IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products

There are multiple vulnerabilities in IBM® SDK Java Technology Edition used by IBM Monitoring. IBM Monitoring has addressed the applicable CVEs.

CVE(s): CVE-2018-3139, CVE-2018-3136, CVE-2018-3180, CVE-2018-3149, CVE-2018-3169, CVE-2018-3183

Affected product(s) and affected version(s):

IBM Monitoring 8.1.3
IBM Application Diagnostics 8.1.3
IBM Application Performance Management 8.1.3
IBM Application Performance Management Advanced 8.1.3
IBM Cloud Application Performance Management, Base Private 8.1.4
IBM Cloud Application Performance Management, Advanced Private 8.1.4
IBM Cloud Application Performance Management

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10878861
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151452
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151465
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151486
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151500

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2FYTzZh