This is to bring to your attention that there are 3 Security exposures that have been found in Tivoli Directory Server (TDS) 6.2 which is bundled with Websphere Business Events (WBE) version 7.x in certain combined e-assemblies downloaded.
1) Java parseDouble vulnerability (CVE-2010-4476)
2) ZDI-CAN-1022: IBM Tivoli Directory Server ibmslapd.exe Remote Code Execution Vulnerability
3) Server audit log may display userpassword in clear text
The fix for this vulnerability will be contained in the 126.96.36.199-TIV-ITDS-IF0002 maintenance package for TDS v6.2.