Solved

Is FME Server affected by CVE-2022-42889 (Apache Commons Text versions 1.5 through 1.9)

Hello,

Is there any info if FME server is affected by new vulnerability CVE-2022-42889 (Apache Commons Text versions 1.5 through 1.9)?

icon

Best answer by keziaatsafe 21 October 2022, 19:46

Userlevel 1

+6

Our team has reviewed CVE-2022-42889 and can confirm that FME is not affected by this vulnerability.

FME Desktop and Engine do not use Apache Commons Text and FME Server is not shipped with Apache Commons Text.

Thanks,

Kezia

Sign up