Vulnerability filegroup1.jar for OBIEE 12c(12.2.1.4 version) on RHEL 8 Platform
Latest patch applied for OBIEE 12c released on Apr 2024, but still lot of vulnerabilities reported for filegroup1.jar
Why it is reported as vulnerability even after applying all the latest patches released on Apr 2024
Eg: We have many filegroup1.jar files like below.
{PATCH_DOWNLOAD_PATH}/OBI_FMWPS4_SPB_12.2.1.4.240412/tools/spbat/generic/SPBAT/logs/uklvadcoc0010a_spb_precheck_2024-05-07_07-01-39/opupg/orcl5955287739746440491.tmp/Disk1/stage/Components/oracle.commons.cli.commons.cli/1.3.1.0.0/DataFiles/filegroup1.jar
Auditing team requested for File usage and its justification.
Team, do you have any idea on this?