Download
Abstract
This patch provides an update for the IBM Tivoli Monitoring (ITM) WebSphere components.
Download Description
This fix upgrades the WebSphere Application Server (WAS) which is shipped as part of the IBM Tivoli Monitoring portal server, to 8.5.5.19 plus more interim fixes referred to as Interim Fix Block 2. Note this fix is cumulative and includes previous Interim fixes plus more fixes.
The interim Fixes included as part of interim Fix Block 1 include:
PH34711: Vulnerability in Apache MyFaces affects WebSphere Application Server (CVE-2021-26296)
PH34122: Vulnerability in Dojo affects WebSphere Application Server (CVE-2020-5258)
PH34067: WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453)
PH34048: WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20454)
PH33994: WebSphere Application Server is vulnerable to a Server-side Request Forgery vulnerability (CVE-2021-20480)
PH34501/PH34944: Multiple Vulnerabilities in Apache HttpComponents and HttpCommons affect WebSphere Application Server (CVE-2015-5262 CVSS 5.3 and more)
Also includes the latest corresponding IHS update, 6.X.X-TIV-ITM_IHS_ALL_8.55.19.01.
Prerequisites
| Required | URL | Language |
| IBM Tivoli Monitoring 6.3.0 Fix Pack 7 Service Pack 5 or later service pack | https://www.ibm.com/support/pages/node/6174183 | English |
Download Package
| Download | Release Date | Language | Download Options What is Fix Central(FC) |
| 6.X.X-TIV-ITM_TEPS_WAS-IHS_ALL_8.55.19.02 | 16 July 2021 | English | FC |
How critical is this fix?
Change History
| Created or Revised By | Date YYYY/MM/DD | Summary of changes |
| DMH | 2021/07/16 | Document published |
| DMH | 2021/08/31 | Missing IF list |
Product Synonym
ITM
Was this topic helpful?
Document Information
Modified date:
31 August 2021
UID
ibm16471637