Is SEP or SESC vulnerable to CVE-2022-42889 impacting Apache Commons Text?

Products

• Endpoint Protection
• Endpoint Security Complete

Issue/Introduction

Is Symantec Endpoint Security client (SES, SESC), Symantec Endpoint Protection (SEP) or the Symantec Endpoint Protection Manager (SEPM) vulnerable to CVE-2022-42889 impacting Apache Commons Text?

• https://nvd.nist.gov/vuln/detail/CVE-2022-42889
• https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om

 

Resolution

Symantec Endpoint Security client (SES, SESC), Symantec Endpoint Protection (SEP) or the Symantec Endpoint Protection Manager (SEPM), or Live Update Administrator are not impacted by this CVE. 

Additional Information

Symantec Security Advisory for Apache Commons Text CVE-2022-42889