Security scan reports an issue with MSXML4.dll file that is used by VMware Update Manager 5.x or 6.0

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• VMware Updated Manager 5.x / 6.0 uses the MSXML4.dll file that is flagged when a security scan is run against the system.
• Updating the file to MSXML6.dll fails.
• In the [<YYYY-DD-MM><time> 'HostUpdateDepotManager' 11344 ERROR] [scanHost20, 346] XML parsing error for result at host: server_name (entity: host-29). Error: Error while parsing metadata string: Class not registered</time> [<YYYY-DD-MM><time> 'SingleHostScanTask.SingleHostScanTask{31}' 11344 ERROR] [vciTaskBase, 564] Task execution has failed: Error while parsing metadata string: Class not registered</time> <YYYY-DD-MM><time> 'ChainedTaskContainer.ChainedTaskContainer{29}' 11344 INFO] [vciTaskBase, 587] A subTask finished: SingleHostScanTask{31}</time> <YYYY-DD-MM><time> 'ParallelExecuteContainerTask.ParallelExecuteContainerTask{32}' 11344 INFO] [vciTaskBase, 587] A subTask finished: ChainedTaskContainer{29}</time>
  
  Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware vCenter Update Manager 6.0.x
VMware vCenter Update Manager 5.1.x
VMware vCenter Update Manager 5.0.x
VMware vCenter Update Manager 5.5.x

Cause

The MSXML4.dll has known vulnerabilities that are detected by a security scan of the system.

Resolution

This is a known issue affecting VMware vCenter Update Manager 5.x / 6.0.

This issue is resolved in:

• vSphere Update Manager 6.0 Update 1, available at Customer Connect. For more information, see the VMware vSphere Update Manager 6.0 Update 1 Release Notes.
• vSphere Update Manager 5.5 Update 3, available at Customer Connect. For more information, see the VMware vSphere Update Manager 5.5 Update 3 Release Notes.
  
• vSphere Update Manager 5.1 Update 3b, available at Customer Connect. For more information, see the VMware vSphere Update Manager 5.1 Update 3b Release Notes.
  

Additional Information

To be alerted when this document is updated, click the Subscribe to Article link in the Actions box..