Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Metrics Manager (CVE-2015-2625 , CVE-2015-4748, CVE-2015-4749)

   
Affected software IBM
 
There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 (Service Refresh 16 Fix Pack 5 and earlier) and 7 (Service Refresh 9 Fix Pack 1 and earlier) that is used by IBM Cognos Metrics Manager. These issues were disclosed as part of the IBM Java SDK updates in July 2015. CVE(s): CVE-2015-2625, CVE-2015-4748 and CVE-2015-4749 Affected product(s) and affected version(s): IBM Cognos Metrics Manager 10.2.2 IBM Cognos Metrics Manager

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_runtime_affect_ibm_cognos_metrics_manager_cve_2015_2625_cve_2015_4748_cve_2015_4749?lang=en_us