IBM Support

Security Bulletin: A security vulnerability has been identified in multiple products shipped with IBM Predictive Maintenance and Quality (CVE-2015-7575).

Created by Mansoor Ahmed on
Published URL:
https://www.ibm.com/support/pages/node/276431
276431

Security Bulletin


Summary

IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM Analytic Server, IBM ILOG CPLEX Optimization Studio, IBM SPSS Statistics, IBM SPSS Modeler and IBM WebSphere MQ are shipped as components of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting : IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM Analytic Server, IBM ILOG CPLEX Optimization Studio, IBM SPSS Statistics, IBM SPSS Modeler and IBM WebSphere MQ has been published in their respective security bulletins.

Vulnerability Details

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio and IBM ILOG CPLEX Enterprise Server (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Please consult the Security Bulletin: Vulnerability in IBM Java SDK affects IBM® DB2® LUW (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect IBM SPSS Analytic Server (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affect IBM SPSS Statistics (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java affect IBM SPSS Modeler (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java SDK affect IBM SPSS Collaboration and Deployment Services (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: vulnerabilities in IBM® Java SDK affect WebSphere Application Server January 2016 CPU (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java Runtime affects IBM WebSphere MQ (CVE-2015-7575) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects WebSphere Message Broker and IBM Integration Bus (CVE-2015-7575) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

Affected Supporting Product and Version
IBM Predictive Maintenance and Quality 2.0



IBM Integration Bus V9.0.0.1
IBM DB2 Enterprise Server Edition V10.1.0.3
IBM SPSS Modeler V16.0.0.0
IBM Websphere Application Server V8.5.5.0
IBM WebSphere MQ V7.5.0.2
IBM Predictive Maintenance and Quality 2.5.0IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.1
IBM DB2 Enterprise Server Edition V10.5.0.4
SPSS Analytic Server V1.0.1.0
IBM SPSS Modeler V16.0.0.1
IBM SPSS Collaboration and Deployment Services V6.0.0.0
IBM Websphere Application Server V8.5.5.3
IBM WebSphere MQ V7.5.0.4
IBM Predictive Maintenance and Quality 2.5.1IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.1
IBM DB2 Enterprise Server Edition V10.5.0.4
SPSS Analytic Server V2.0
IBM SPSS Modeler V17.0.0.0
IBM SPSS Collaboration and Deployment Services V7.0.0.0
IBM Websphere Application Server V8.5.5.3
IBM WebSphere MQ V7.5.0.4
IBM Predictive Maintenance and Quality 2.5.2IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.2
IBM DB2 Enterprise Server Edition V10.5.0.5
SPSS Analytic Server V2.0
IBM SPSS Modeler V17.0.0.0
IBM SPSS Collaboration and Deployment Services V7.0.0.1
IBM Websphere Application Server V8.5.5.6
IBM WebSphere MQ V7.5.0.4

Get Notified about Future Security Bulletins

Subscribe to My Notifications to be notified of important product support alerts like this.

References

Complete CVSS v2 Guide
On-line Calculator v2

Off

Related Information

IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

[{"Product":{"code":"SSTNNL","label":"Predictive Maintenance and Quality"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF016","label":"Linux"}],"Version":"2.5.2;2.5.1;2.5;2.0","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
15 June 2018

UID

swg21981402

Page Feedback