High Severity

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects WebSphere Application Server July 2021 CPU that is bundled with IBM WebSphere Application Server Patterns

Share this post:

There are multiple vulnerabilities in the IBM SDK Java Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the IBM Java SDK updates in July 2021.

CVE(s): CVE-2021-2388 , CVE-2021-2369 , CVE-2021-2432

Affected product(s) and affected version(s):

IBM Java SDK shipped with IBM WebSphere Application Server Patterns 1.0.0.0 through 1.0.0.7 and 2.2.0.0 through 2.3.3.3.

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6482283
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/205815
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/205796
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/205856

More stories

Security Bulletin: Multiple Vulnerabilities in VMware ESXi affect IBM Cloud Pak System (CVE-2021-21994, CVE-2021-21995)

Oct 21, 2021 8:00 pm EDT | High Severity

Vulnerabilties in VMware ESXi affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. ...read more


Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway

Oct 21, 2021 8:00 pm EDT | High Severity

Security Vulnerabilities in Node.js affect IBM Voice Gateway. ...read more


Security Bulletin: IBM Event Streams UI affected by multiple node package vulnerabilities

Oct 21, 2021 12:15 am EDT | High Severity

IBM Event Streams UI affected by multiple node package vulnerabilities ...read more