Multiple security vulnerabilities exist in the IBM Java Runtime Environment component of WebSphere Message Broker for IBM JRE 5.0 SR15 (and earlier) and IBM JRE 6.0 SR12 (and earlier)
Affected product(s) and affected version(s):
IBM WebSphere Message Broker V184.108.40.206, V220.127.116.11 and V18.104.22.168 are affected on all platforms. However, no version of IBM WebSphere Message Broker for z/OS is affected
Refer to the following reference URLs for remediation and additional vulnerability details.
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21635160