Skip to main content

Hello,

Is there any info if FME server is affected by new vulnerability CVE-2022-42889 (Apache Commons Text versions 1.5 through 1.9)?

Hi @dominikw​ ,

Our team has reviewed CVE-2022-42889 and can confirm that FME is not affected by this vulnerability.

FME Desktop and Engine do not use Apache Commons Text and FME Server is not shipped with Apache Commons Text.

 

Thanks,

Kezia


Reply