My Oracle Support Banner

DataStage 8.5 - Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450) (Doc ID 2133162.1)

Last updated on JUNE 26, 2018

Applies to:

PeopleSoft Enterprise EPM Performance Management Warehouse - Version 9.1 and later
Information in this document applies to any platform.


On: PeopleSoft Enterprise EPM Performance Management Warehouse 9.1; DataStage 8.5 FP1; Installation/Configuration

DataStage 8.5 AIX lpar showing security issue

87171 IBM WebSphere Java Object Deserialization RCE Critical Web Servers

Description: The remote IBM WebSphere Application Server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections (ACC) library. An unauthenticated, remote attacker can exploit this, by sending a crafted SOAP request, to execute arbitrary code on the target host.
The issue has the following business impact:
Security vulnerability.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.