Medium Severity
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Cast Iron Solution & App Connect Professional.
July 1, 2022
Categorized: Medium Severity
Share this post:
There are multiple vulnerabilities in the IBM SDK Java Technology used by IBM WebSphere Cast Iron Solution & App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Apr 2022, IBM WebSphere Cast Iron Solution & App Connect Professional have addressed the applicable CVEs. These vulnerabilities are addressed in App connect professional v7.5.5.0, customer can migrate to this version without incurring any additional cost.
CVE(s): CVE-2022-21496 , CVE-2022-21434 , CVE-2022-21443
Affected product(s) and affected version(s):
| Affected Product(s) | Version(s) |
| App Connect Professional | v7.5.2.0 |
| App Connect Professional | v7.5.3.0 |
| App Connect Professional | v7.5.4.0 |
| App Connect Professional | v7.5.5.0 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/6600737
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/224777
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/224718
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/224726
Security Bulletin: A security vulnerability has been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component (CVE-2022-21496)
August 16, 2022 | Medium Severity
IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerability. ...read more
Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.
August 16, 2022 | Medium Severity
Multiple Vulnerabilities have been found in Node.js used by the Common UI in Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. ...read more
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component (CVE-2022-22475, CVE-2022-22476)
August 16, 2022 | Medium Severity
IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerabilities. ...read more