Vulnerabilities in FortiEMS related to Oracle JAVA

[Dattatray]

We are using FortiEMS in our organization. And recently we have received a vulnerability related to Oracle JAVA on EMS server side. So, please suggest whether JAVA is required on EMS server side.

Apache 2.4.x < 2.4.62 multiple vulnerabilities - High

Oracle JAVA SE multiple vulnerabilities - High

Please refer attached snap.

Thanks.

[rosatechnocrat]

FortiEMS for sure uses Apache. 
Not Clear about JAVA SE. You may check the release notes or admin guide for Java confirmation. 

[btan · Accepted solution]

As per check internally, EMS do not use Java at all.

The latest EMS 7.2.5 is already using Apache 2.4.62, should fix your < 2.4.62 CVEs.

For more detailed discussion, kindly raise a Support Ticket.
Thank you.