Vulnerability Bulletins |
IBM Security Bulletin: Potential vulnerability exists in Forms Experience Builder based on its use of Apache Groovy (CVE-2015-3253) |
|
| Affected software | IBM |
|
IBM Forms Experience Builder utilizes the Apache Groovy open source library that could expose a system to a cross-site request forgery. CVE(s): CVE-2015-3253 Affected product(s) and affected version(s): IBM Forms Experience Builder 8.5 IBM Forms Experience Builder 8.5.1 IBM Forms Experience Builder 8.6 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21964355 X-Force More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_potential_vulnerability_exists_in_forms_experience_builder_based_on_its_use_of_apache_groovy_cve_2015_3253?lang=en_us |
|