Problem

Do CVEs against Apache Struts or Apache POI apply to Desktop Validator, Server Validator or Validation Authority?

Resolution

No, those projects are separate from Apache Web Server, which is used by Validation Authority and which Server Validator might be integrated with. DV does not use Apache Web Server. Accordingly, any CVEs reported against POI or Struts do not affect DV, SV or VA. For Apache Web Server CVEs, contact support for updates to Validation Authority. Server Validator users who integrate with Apache Web Server should update the underlying Apache installation. Server Validator updates would not be necessary in that case.