Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2016-06-06	CVE-2015-5041	Information Exposure vulnerability in multiple products The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods. network low complexity ibm suse redhat CWE-200 critical	9.1
2016-01-02	CVE-2015-7450	Unspecified vulnerability in IBM products Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library. network low complexity ibm critical	9.8