Update library "commons-text-1.6.jar" to at least version 1.10
Based on this page
https://support.docuware.com/en-us/knowledgebase/article/KBA-37601
according to you DocuWare is not vulnerable because it does not use that library.
However, even if not used, that library is loaded when the “Docuware Fulltext Service” service starts and opens a TCP port on the Windows Server hosting DocuWare.
It is required that you patch it with at least version "commons-text-1.10.jar".
Thank you
Best Regards
2
votes
Gianni
shared this idea
Thank you for your contribution.
DocuWare has already updated the library in the current version.