EDR: Can Java be updated if my current version has vulnerabilities?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can Java be updated if my current version has vulnerabilities?

Environment

• Carbon Black EDR: All Versions
• Java OpenJDK

Resolution

OpenJDK can be upgraded within the minor build version but this should only be done as a last option. If you are not on the latest version of the on-prem EDR Server, upgrade that first and verify the current version is outside the vulnerability. 

Additional Information

Although we do not foresee issues with upgrading Java OpenJDK, this is done at your own risk. QA testing is done on the version shipped with each CB EDR Server version only. VMWare CB does not install the Java JDK, so we recommend following the guidelines provided by the OS provider.