Is CA PC/DA affected by CVE-2025-66516 Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA CVSS v3.1?

Products

• Network Observability
• CA Performance Management

Issue/Introduction

The above CVE may affect Apache in CA PM.  Please confirm.

Environment

any supported Performance Management up to and including the 25.4.3

Resolution

We could not identify related tika modules being used in any of our components;

Based on that we seem to be not affected.