Table of Contents

Search

  1. Abstract
  2. Installation and Upgrade
  3. 10.2 Fixed Limitations and Closed Enhancements
  4. 10.2 Known Limitations
  5. Emergency Bug Fixes Merged into 10.2
  6. Informatica Global Customer Support

Release Notes

Release Notes

Third-Party Library Fixed Vulnerabilities

Third-Party Library Fixed Vulnerabilities

Informatica upgraded several third-party libraries to more recent versions.
Version 10.2 is not vulnerable to the following CVEs:
Library
Folder
Vulnerability
Version in 10.2
apache commons beanutils
server/bin/javalib/505100
CVE-2014-0114
1.9.3
apache commons fileupload
source/services/shared/jars/thirdparty
CVE-2016-3092
1.3.2
apache commons collections
source/services/wsh.war/WEB-INF/lib
CVE-2015-6420
3.2.2
apache commons codec
DataTransformation/bin/HIPAAValidation/8.3.0/lib/
n/a
1.10
apache commons fileupload
DataTransformation/bin/HIPAAValidation/8.3.0/lib/
CVE-2014-0050
CVE-2013-0248
1.3.2
apache tomcat
DataTransformation/bin/HIPAAValidation/8.3.0/lib/
Upgrade resolved many vulnerabilities related to tomcat.
6.0.48
apache xalan
DataTransformation/bin/HIPAAValidation/8.3.0/lib/
CVE-2014-0107
2.7.2
apache commons fileupload
source/services/MetadataManagerService/utilities/mmcmd/lib/
source/services/MetadataManagerService/utilities/mmrepocmd/lib/
CVE-2016-3092
1.3.2
msvcp*.dll
source/services/MetadataManagerService/mmagentapps/mmagent/bin
Upgrade resolved many vulnerabilities related to .NET framework.
msvcp120.dll
msvcr*.dll
source/services/MetadataManagerService/mmagentapps/mmagent/bin
Upgrade resolved many vulnerabilities related to .NET framework.
msvcr120.dll

0 COMMENTS

We’d like to hear from you!