Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities related to XML DoS attack IBM Emptoris Strategic Supply Management Suite products (CVE-2014-3529, CVE-2014-3574) |
|
| Affected software | IBM |
|
The IBM Emptoris Strategic Supply Management suite of products, including IBM Emptoris Contract Management, IBM Emptoris Sourcing, IBM Emptoris Strategic Supply Management Platform and IBM Emptoris Program Management are affected by multiple security vulnerabilities related to XML DoS vulnerabilities in the consumed 3rd party APIs: Apache POI API and NextApp Echo API. CVE(s): CVE-2014-6212, CVE-2014-3529 and CVE-2014-3574 Affected product(s) and affected version(s): IBM Emptoris Contract More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_related_to_xml_dos_attack_ibm_emptoris_strategic_supply_management_suite_products_cve_2014_3529_cve_2014_3574?lang=en_us |
|