Regarding VCP, PS & SNO Java Binaries When Upgrading to EBS 12.2 Vulnerability, Security (Doc ID 2282672.1)

Last updated on NOVEMBER 07, 2024

Applies to:

Goal

For customers NOT using the Value Chain Planning (VCP) suite of applications, which includes Advanced Supply Chain Planning (ASCP), Production Scheduling (PS), Strategic Network Optimization (SNO), etc...

When upgrading to EBS 12.2, need to follow the document:
Using the Latest JDK 7.0 Update with Oracle E-Business Suite Release 12.2 (Doc ID 1530033.1)

However, there are no instructions to upgrade the following Java binaries.  Able to upgrade everything per document above to version 1.7.0_141-b11, but may also need to upgrade the java listed below due to security concerns and compliance issues:

server java version java binary location
"1.6.0_12-b04" : /1ogl/ebs/appl/fs2/EBSapps/appl/msc/12.0.0/bin/PS/scp/12.2/ps/jre/bin/java
"1.6.0_12-b04" : /1ogl/ebs/appl/fs2/EBSapps/appl/msc/12.0.0/bin/SNO/scp/12.2/sno/installer_jre/bin/java

Both of these java binaries are owned by MSC.  However, there may be cases of certain customers NOT using ASCP nor PS, but the java binaries are still there, causing a compliance failure.  Can they just delete them?
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.