Medium Severity

IBM Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Virtualization Engine TS7700 – July 2018 & October 2018

Share this post:

There are multiple vulnerabilities in IBM® SDK, Java™ Technology Edition, Versions 7 and 8, that are used by IBM Virtualization Engine TS7700. These issues were disclosed as part of the IBM Java SDK updates in July 2018 and October 2018.

CVE(s): CVE-2018-1517, CVE-2018-2973, CVE-2018-3139, CVE-2018-3180

Affected product(s) and affected version(s):

All versions of microcode for the IBM Virtualization Engine TS7700 (3957-V07, 3957-VEB, 3957-VEC) prior to and including the following are affected:

Machine Type Model Version
3957 V07 8.42.1.8
3957 VEB 8.42.1.8
3957 VEC 8.42.1.8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10732035
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151455
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151497

More stories

IBM Security Bulletin: Weaker than expected security in WebSphere Application Server with SP800-131 transition mode (CVE-2018-1996)

Feb 15, 2019 9:00 am EST | Medium Severity

There is a potential for weaker than expected security in WebSphere Application Server with SP800-131 transition mode and SSL_TLSv2. CVE(s): CVE-2018-1996 Affected product(s) and affected version(s): This vulnerability affects the following versions and releases of IBM WebSphere Application Server: Version 9.0 Version 8.5 Version 8.0 Version 7.0 Refer to the following reference URLs for remediation ...read more


IBM Security Bulletin: Vulnerability in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Feb 15, 2019 9:00 am EST | Medium Severity

There is a vulnerability in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVE. CVE(s): CVE-2018-3180 Affected product(s) and affected version(s): IBM Installation Manager and IBM Packaging Utility versions 1.8.9.2 and earlier. Refer to the following ...read more


IBM Security Bulletin: IBM Security Guardium is affected by a Java vulnerability

Feb 15, 2019 9:00 am EST | Medium Severity

IBM Security Guardium has addressed the following vulnerability. CVE(s): CVE-2018-13785 Affected product(s) and affected version(s): Affected IBM Security Guardium Affected Versions IBM Security Guardium 9.0 -9.5 Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10869590X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146015 ...read more