Need CVE vulnerability fixed for Oracle Weblogic Application server.

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

The network and security team ran a scan we are finding CVEs for Oracle Weblogic on the IM 14.2 standalone server.

 

 

Environment

Release : 14.2

Component : IdentityMinder(Identity Manager)

Resolution

Broadcom and Identity Suite does not own or control the Application Server or OS layer for the standalone IM product.  You will need to work with your application server team to review and install any needed patches to your Weblogic Application server.