@HrdRck 1.Any application is using Spring on Java 9 or newer, especially TomCat servers are impacted (Java 8 does not appear to be vulnerable)2.Recommend upgrading your software to Spring Framework 5.3.18.3.Check the version under bundles console if you are using that functionality. Regards,Raja