Veracode Security flaws related to ISOMORPHIC_CORE_RPC.jar

Hi,

As per Deutsche Bank standard, all applications are required to scan binaries against security flaws using Veracode scan. While performing Veracode scan for our applicaiton, we have found "Cross-Site Scripting" flaws in Isomorphic jar file (ISOMORPHIC_CORE_RPC.jar). I have attached details of these security flaws and also version of Isomorphic JAR file which is being used in our application.

Can you pls. help us to provide fixes for these flaws ? Due to security issues, it requires urgent attention.

Pls. let us know if you need conference call so that we can explain these issues.

Thanks
Samir Shah
Application Manager

Attached Files

SmartClientVeracode_Issue_Details.txt (3.2 KB)