Security Flaws in Commons-Beanutils and Libapache-Mod-Jk Require Immediate Attention

Two vulnerabilities have been identified in commons-beanutils and libapache-mod-jk affecting ESM Apps Legacy systems. The commons-beanutils version 1.9.2-3ubuntu0.1~esm1 only addresses CVE-2025-48734, while the version in ESM Apps fixes CVE-2014-0114 and CVE-2019-10086. Similarly, libapache-mod-jk version 1:1.2.41-1ubuntu0.1~esm1 only addresses CVE-2024-46544, while the ESM Apps version fixes CVE-2023-41081. This discrepancy means that customers using ESM Apps Legacy may be exposed to known vulnerabilities. To mitigate this risk, updates to both packages are necessary to include the missing security fixes. Failure to address these issues could lead to potential exploitation of unpatched vulnerabilities. The current status indicates that bug watches are tracking these issues for further updates.

Key Points: • Commons-beanutils and libapache-mod-jk have unpatched vulnerabilities in ESM Apps Legacy. • CVE-2025-48734 and CVE-2024-46544 are the only addressed CVEs in Legacy versions. • Updates are required to include critical security fixes to avoid exploitation.