Multiple security vulnerabilities exist in the IBM Java Runtime Environment component of WebSphere Message Broker for IBM JRE 5.0 SR15 (and earlier) and IBM JRE 6.0 SR12 (and earlier)
Affected product(s) and affected version(s):
IBM WebSphere Message Broker V220.127.116.11, V18.104.22.168 and V22.214.171.124 are affected on all platforms. However, no version of IBM WebSphere Message Broker for z/OS is affected
Refer to the following reference URLs for remediation and additional vulnerability details.
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21635160