Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities related to XML DoS attack IBM Emptoris Services Procurement (CVE-2014-3529, CVE-2014-3574) |
|
| Affected software | IBM |
|
The IBM Emptoris Services Procurement product is affected by multiple security vulnerabilities related to XML DoS vulnerabilities in the consumed 3rd party APIs: Apache POI CVE(s): CVE-2014-3529 and CVE-2014-3574 Affected product(s) and affected version(s): IBM Emptoris Services Procurement 10.0.0.x Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21694987 X-Force Database: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_related_to_xml_dos_attack_ibm_emptoris_services_procurement_cve_2014_3529_cve_2014_3574?lang=en_us |
|