Received vulnerability to Upgrade to Apache POI 5.4.0 or later

Products

• Autosys Workload Automation

Issue/Introduction

Received vulnerability to upgrade poi-5.2.3.jar to Apache POI 5.4.0 or later:
Path              : /app/autosys/WorkloadAutomationAE/wcc/tomcat/webapps/reporting-rest/WEB-INF/lib/poi-5.2.3.jar
  Installed version : 5.2.3
  Fixed version     : 5.4.0 

Environment

WebUI R12.1 SP1

Resolution

The mentioned poi-5.2.3.jar was upgraded in the 12.1 SP1 CUM4 patch.
https://support.broadcom.com/web/ecx/solutiondetails?aparNo=99112445&os=MULTI-PLATFORM

Either apply the above patch or upgrade to R24.0 or later versions.