If you need to report vulnerability concerns for the XVFB X-Windows task that is used by the CA 7 Web Client flow view graphic feature, you will need to contact IBM. The XVFB task is not a Broadcom mainframe component. XVFB is part of the z/OS base.
Release : 12.1
XVFB is an optional component that the CA 7 Web Client uses to render flowcharting only of the Define perspective. If you choose to stop running the XVFB task due to a vulnerability or any other reason, very minimal functionality is lost. You will not be able to render the flow view graphics.
Xvfb X11R6.9 and is now part of the z/OS base.
Xvfb is an in-memory display server and enables a customer to run graphical applications
without a physical display device. It is especially useful when testing an X-Windows server
without using real hardware.