IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager

May 1, 2019 9:01 am EDT

Categorized: High Severity

Share this post:

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6, 8 used by IBM Tivoli Business Service Manager. IBM Tivoli Business Service Manager has addressed the applicable CVEs. These issues were also addressed by IBM WebSphere Application Server shipped with IBM Tivoli Business Service Manager.

CVE(s): CVE-2018-1890, CVE-2018-12547, CVE-2019-2426

Affected product(s) and affected version(s):
IBM Tivoli Business Service Manager 6.1.0 all Fixpacks
IBM Tivoli Business Service Manager 6.1.1 all Fixpacks
IBM Tivoli Business Service Manager 6.2.0 GA

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10882820
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152081
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157512
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155744

from IBM Product Security Incident Response Team https://ibm.co/2V6lPDF