Boletines de Vulnerabilidades

IBM Security Bulletin: A vulnerability exists in Apache Xalan-Java prior to 2.7.2 as used in IBM QRadar Security Information and Event Manager 7.1 MR2, and 7.2 MR2. (CVE-2014-0107)
Información sobre el sistema

Software afectado	IBM
Descripción
IBM QRadar Security Information and Event Manager (SIEM) 7.1 MR2 and 7.2 MR2 utilizes Apache Xalan-Java that contains a vulnerability. CVE(s): CVE-2014-0107 Affected product(s) and affected version(s): IBM QRadar Security Information and Event Manager 7.1 MR2 IBM QRadar Security Information and Event Manager 7.2 MR2 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21677145 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_a_vulnerability_exists_in_apache_xalan_java_prior_to_2_7_2_as_used_in_ibm_qradar_security_information_and_event_manager_7_1_mr2_and_7_2_mr2_cve_2014_0107?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2014-0107 ,CVE-2013-4286 ,CVE-2014-0033 ,CVE-2013-4322 ,CVE-2013-4590 ,CVE-2014-0050 ,CVE-2013-6308 ,CVE-2013-6309 ,CVE-2013-6310 ,CVE-2013-6311 and CVE-2014-0224.