Security Vulnerabilities in Apache FOP and Apache Batik affect IBM WebSphere Portal

  • 14 Aug, 2017

XML external entity (XXE) security vulnerabilities in Apache FOP and Apache Batik affect IBM WebSphere Portal.

Apache FOP could allow a remote authenticated attacker to obtain sensitive information, caused by an XML external entity (XXE) error when processing XML data. By using a specially-crafted SVG file. A remote attacker could exploit this vulnerability to obtain sensitive information or possibly cause a denial of service.

Read the security buletin here

PrevNext

Related Posts

Proud to be an HCL Ambassador 2021

  • 15 Dec, 2020

​If you have a problem, and no-one else can help, and if you can find them, maybe you can ask an HCL Ambassador… !(http://www.mysphere.com.br/wp-content/uploads/2020/12/HCLAmbassaborlight4x.png) See the HCL Ambassadors Class of 2021(https://hcltechsw.com/about/hcl-ambassadors/class-of-2021)

Proud to be an HCL Ambassador 2021Read More

WebSphere Application Server Configuration Comparison Tool

  • 06 Sep, 2019

The Configuration Comparison Tool (CCT) is a lightweight wsadmin script and Python report generation script which will produce HTML reports on configuration settings for the following types of resources. - Application Servers - Node Agents - Global Security configuration (not Domain Security) - Trust Association (Global and Domain) - SSL Configurations - Data Sources - J2C Resource Adapters - JDBC Drivers - Object Cache instances - Servlet Cache instances - Service Integration Bus instances - Resource Environment Providers - Resource Environment Entries - File system comparisons CCT usage scenarios: - Isolating configuration creep: Periodic configuration snapshots can be gathered and arch

WebSphere Application Server Configuration Comparison ToolRead More

IBM Support Community for Digital Experience Products

  • 07 Nov, 2017

In the next week Digital Experience products: • WebSphere Portal • Web Content Manager • Digital Experience Patterns • Digital Experience on Cloud • Forms Experience Builder • Forms Experience Builder on Cloud will use the new IBM Support Community support portal. The interface is clean and you can search for fixes, open Cases (not PMR's anymore) and talk with Watson on  a chat screen.

IBM Support Community for Digital Experience ProductsRead More