Plugin 214532 - Oracle Java SE Multiple Vulnerabilities (January 2025 CPU) CVE-2025-0509, CVE-2025-21502

Products

• CA Service Management - Service Desk Manager

Issue/Introduction

Our security team found this vulnerability for CA Search Server

Path              : C:\Program Files\CA\SC\CASearchServer\jre
Installed version : 8.0.92.14 / build 8.0.92

We need to address this urgently

Environment

CA Search Server 17.3 and up

Resolution

CA Search Server operations don't use this jre so Broadcom does not consider it has this vulnerability.

Admins can rename this folder. For example, one can rename it from C:\Program Files\CA\SC\CASearchServer\jre to C:\Program Files\CA\SC\CASearchServer\not_used_jre