Details
-
Fix
-
Status: Released (View Workflow)
-
Major
-
Resolution: Fixed
-
1.12, 1.13
-
None
-
CVE-2015-6420
Description
Current Situation
- Currently JobScheduler components use Xerces version 2.11.0
- A vulnerability affects this version, see https://nvd.nist.gov/vuln/detail/CVE-2015-6420 and https://www.cvedetails.com/cve/CVE-2015-6420/ https://nvd.nist.gov/vuln/detail/CVE-2015-6420
Desired Behavior
- Due to a vulnerability Issue of older Xerces releases the JobScheduler components should use the current version 2.12.0 that fixes the issues.
Attachments
Issue Links
- relates to
-
JS-1978 Update xerces 2.12.0 to 2.12.2 due to 3rd party vulnerability issue CVE-2022-23437
- Released