Java.exe vulnerability for xFlow

Products

• CA Service Desk Manager
• CA Service Management - Service Desk Manager

Issue/Introduction

During threat scans, found that xFlow server was quarantine, caused specifically by the presence of file D:\program files\ca\xflow\jre\bin\java.exe (version 8.0.0.132)

Can that jave.exe (version 8.0.0.132) be updated or removed?

Environment

Release : 17.3

CA Service Management

Resolution

After the removal of the \program files\ca\xflow\jre directory, xFlow continues to work as expected.