Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerability in Product IBM Tivoli Common Reporting (CVE-2015-7436,CVE-2015-7435,CVE-2012-6153,CVE-2014-3577,CVE-2015-7450,CVE-2015-4872)

Affected software	IBM

Fixes of Cognos Business Intelligence is provided as part of Tivoli Common Reporting (TCR) fixes. There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Technology Edition, Version 7 that are used by IBM Cognos Business Intelligence. These issues were disclosed as part of the IBM Java SDK updates in October 2015. An Apache Commons Collections vulnerability for handling Java object deserialization More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerability_in_product_ibm_tivoli_common_reporting_cve_2015_7436_cve_2015_7435_cve_2012_6153_cve_2014_3577_cve_2015_7450_cve_2015_4872?lang=en_us

IBM Security Bulletin: Multiple vulnerability in Product IBM Tivoli Common Reporting (CVE-2015-7436,CVE-2015-7435,CVE-2012-6153,CVE-2014-3577,CVE-2015-7450,CVE-2015-4872)