Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server and WebSphere Lombardi Edition (CVE-2015-0254)

Summary

WebSphere Application Server is shipped as a component of IBM Business Process Manager, WebSphere Process Server, and WebSphere Lombardi Edition. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin

• Security Bulletin: Vulnerability in Apache Standard Taglibs affects IBM WebSphere Application Server (CVE-2015-0254)
  for vulnerability details and information about fixes.

Affected Products and Versions

• • WebSphere Lombardi Edition V7.2.0.x
• WebSphere Process Server V6.x through V7.x
• IBM Business Process Manager V7.5.0.0 through V7.5.1.2
• IBM Business Process Manager V8.0 through V8.0.1.3
• IBM Business Process Manager V8.5.0 through V8.5.0.2
• IBM Business Process Manager V8.5.5
• IBM Business Process Manager V8.5.6 through V8.5.6.0 cumulative fix 2
• IBM Business Process Manager V8.5.7 through V8.5.7.0 cumulative fix 1

For_ earlier unsupported versions of the products, IBM recommends upgrading to a fixed, supported version of the product._

Workarounds and Mitigations

None