Hello Devconnect team

A customer has reported multiple security vulnerabilities being detected related to Java archive files exported with each OD Application .war.

I have requested the customer to ensure they have HTML mode disabled, per OD 8.1 release notes related to XSS, on page 4:
https://www.devconnectprogram.com/fileMedia/download/7481d19e-975b-4208-9749-f25396d56456

If the customer has HTML mode disabled in their Applications, is there a way to remove these files safely? Otherwise, can these vulnerabilities be corrected?

Attached the list of vulnerabilities being reported.

OD version is 8.1.0.0601

Files:
scert-08.10.06.01.jar
validate-IC.jsp
validate-ws.jsp
validate-CTI.jsp
validate-common.jsp
validate-head.jsp

Thank you

Hi. For your request, you should open an new SR (Service Request) ticket with Avaya Support (https://support.avaya.com/service-requests/enterticket.action) including the vulnerabilities.txt file on attachments.