Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerabilities related to XML DoS attack in IBM Emptoris Rivermine Telecom Expense Management product (CVE-2014-3529, CVE-2014-6212, CVE-2014-3574)

Affected software	IBM

The IBM Emptoris Rivermine Telecom Expense Management product is affected by multiple security vulnerabilities related to XML DoS vulnerabilities in the consumed 3rd party APIs: Apache POI API and NextApp Echo API. CVE(s): CVE-2014-3529, CVE-2014-6212 and CVE-2014-3574 Affected product(s) and affected version(s): IBM Emptoris Rivermine Telecom Expense Management 6.5.x through 7.0.x Refer to the following reference URLs for remediation and additional vulnerability details: Source More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_related_to_xml_dos_attack_in_ibm_emptoris_rivermine_telecom_expense_management_product_cve_2014_3529_cve_2014_6212_cve_2014_3574?lang=en_us

IBM Security Bulletin: Multiple vulnerabilities related to XML DoS attack in IBM Emptoris Rivermine Telecom Expense Management product (CVE-2014-3529, CVE-2014-6212, CVE-2014-3574)