Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerabilities in IBMs Java 5 and Java 6 JREs used by Web Experience Factory, Websphere Dashboard Framework, and Lotus Widget Factory development components.


System information

   
Affected software IBM

Description

Issues disclosed in the Oracle January 2014 Java SE Critical Patch Update may impact the development components of Web Experience Factory, Websphere Dashboard Framework, and Lotus Widget Factory. The relevant patched vulnerabilities are CVE-2014-0423 (CVSS 5.5), CVE-2014-0416 (CVSS 5) , and CVE-2014-0411 (CVSS 4). CVE(s): CVE-2014-0423, CVE-2014-0416 and CVE-2014-0411 Affected product(s) and affected version(s): All supported versions of Web Experience Factory, WebSphere Dashboard

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_s_java_5_and_java_6_jres_used_by_web_experience_factory_websphere_dashboard_framework_and_lotus_widget_factory_development_components?lang=en_

Standar resources

Property Value
CVE CVE-2014-0423 ,CVE-2014-0416 and CVE-2014-0411.

Version history

Version Comments Date
1.0 Advisory issued 2014-03-17
Ministerio de Defensa
CNI
CCN
CCN-CERT