IBM Support

Security Bulletin: A security vulnerability has been identified in multiple products shipped with IBM Predictive Maintenance and Quality: CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-757

Created by Mansoor Ahmed on
Published URL:
https://www.ibm.com/support/pages/node/277809
277809

Security Bulletin


Summary

IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM ILOG CPLEX Optimization Studio, IBM SPSS Analytic Server and IBM SPSS Modeler are shipped as components of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting : IBM WebSphere Application Server, IBM DB2, IBM SPSS Modeler, IBM Cognos Business Intelligence Server, IBM SPSS Collaboration and Deployment Services,IBM Integration Bus, IBM ILOG CPLEX Optimization Studio, IBM SPSS Analytic Server and IBM SPSS Modeler has been published their respective security bulletins.

Vulnerability Details

Please consult the Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio and IBM ILOG CPLEX Enterprise Server (CVE-2015-8126 CVE-2016-0494 CVE-2016-0483 CVE-2015-8472 CVE-2016-0475 CVE-2016-0466 CVE-2016-0402 CVE-2015-7575 CVE-2016-0448 CVE-2015-5041 CVE-2015-7981 CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Please consult the Security Bulletin: Vulnerability in IBM Java SDK affects IBM® DB2® LUW (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server January 2016 CPU (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Several vulnerabilities in the libpng component of IBM Cognos Business Intelligence Server (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in in IBM Java Runtime affect IBM SPSS Analytic Server (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java affect IBM SPSS Modeler (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Please consult the Security Bulletin: Vulnerability in IBM Java SDK affect IBM SPSS Collaboration and Deployment Services (CVE-2015-8126, CVE-2016-0494, CVE-2016-0483, CVE-2015-8472, CVE-2016-0475, CVE-2016-0466, CVE-2016-0402, CVE-2015-7575, CVE-2016-0448, CVE-2015-5041, CVE-2015-7981, CVE-2015-8540) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

Affected Supporting Product and Version
IBM Predictive Maintenance and Quality 2.0



IBM Integration Bus V9.0.0.1
IBM DB2 Enterprise Server Edition V10.1.0.3
IBM SPSS Modeler V16.0.0.0
IBM Websphere Application Server V8.5.5.0
IBM Predictive Maintenance and Quality 2.5.0IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.1
IBM DB2 Enterprise Server Edition V10.5.0.4
IBM SPSS Analytic Server V1.0.1.0
IBM SPSS Modeler V16.0.0.1
IBM SPSS Collaboration and Deployment Services V6.0.0.0
IBM Websphere Application Server V8.5.5.3
IBM Predictive Maintenance and Quality 2.5.1IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.1
IBM DB2 Enterprise Server Edition V10.5.0.4
IBM SPSS Analytic Server V2.0
IBM SPSS Modeler V17.0.0.0
IBM SPSS Collaboration and Deployment Services V7.0.0.0
IBM Websphere Application Server V8.5.5.3
IBM Predictive Maintenance and Quality 2.5.2IBM Integration Bus V9.0.0.2
IBM ILOG CPLEX Optimization Studio V12.6.0.2
IBM DB2 Enterprise Server Edition V10.5.0.5
IBM SPSS Analytic Server V2.0
IBM SPSS Modeler V17.0.0.0
IBM SPSS Collaboration and Deployment Services V7.0.0.1
IBM Websphere Application Server V8.5.5.6

Get Notified about Future Security Bulletins

Subscribe to My Notifications to be notified of important product support alerts like this.

References

Complete CVSS v2 Guide
On-line Calculator v2

Off

Related Information

IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

[{"Product":{"code":"SSTNNL","label":"Predictive Maintenance and Quality"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF016","label":"Linux"}],"Version":"2.5.2;2.5.1;2.5;2.0","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
15 June 2018

UID

swg21982320

Page Feedback