Security Bulletin: Vulnerability in IBM Java Runtime affects Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2019-2989)

Feb 17, 2020 7:00 pm EST

Categorized: Medium Severity

Share this post:

There is a vulnerability in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVE.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Watson Explorer Deep Analytics Edition Foundational Components	12.0.0.0, 12.0.0.1 12.0.1, 12.0.2.0 – 12.0.2.2, 12.0.3, 12.0.3.1
IBM Watson Explorer Deep Analytics Edition Analytical Components	12.0.0.0, 12.0.1, 12.0.2.0 – 12.0.2.2, 12.0.3, 12.0.3.1
IBM Watson Explorer Deep Analytics Edition oneWEX	12.0.0.0, 12.0.1, 12.0.2.0 – 12.0.2.2, 12.0.3, 12.0.3.1
IBM Watson Explorer Foundational Components	11.0.0.0 – 11.0.0.3, 11.0.1, 11.0.2.0 – 11.0.2.5
IBM Watson Explorer Foundational Components	10.0.0.0 – 10.0.0.6
IBM Watson Explorer Foundational Components Annotation Administration Console	12.0.0.0, 12.0.1,12.0.2.0 – 12.0.2.2, 12.0.3, 12.0.3.1
IBM Watson Explorer Foundational Components Annotation Administration Console	11.0 – 11.0.0.3, 11.0.1, 11.0.2, 11.0.2.1 –  11.0.2.5
IBM Watson Explorer Foundational Components Annotation Administration Console	10.0 – 10.0.0.6
Watson Explorer Analytical Components	11.0 – 11.0.0.3, 11.0.1, 11.0.2, 11.0.2.1 –  11.0.2.5
Watson Explorer Analytical Components	10.0 – 10.0.0.2
IBM Watson Explorer Content Analytics Studio	12.0.0, 12.0.1, 12.0.2, 12.0.3
IBM Watson Explorer Content Analytics Studio	11.0.0.0 – 11.0.0.3, 11.0.1.0 – 11.0.2.2

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/2440023

from IBM Product Security Incident Response Team https://ift.tt/2V0nwks