Question:
Security scan detected obsolete software Microsoft XML Parser and Microsoft XML Core Services (MSXML) 4.0. Do we need & use XML for Xenmobile? Can we remove or update XML?
Answer:
This specific item is a very common scan error that likely does not have anything to do with XenMobile. In fact for a time it was #2 in the Top 10 security issues reported by Qualys. See https://www.qualys.com/research/top10/2015/07/. It may be leftover from a Sophos anti-virus installation. My testing indicates that a fresh installation of XDM 9.0 does not install the vulnerable MSXML 4.0. Windows contains MSXML 3.0 and MSXML 6.0 installed by default for all programs. However MSXML 4.0 is vulnerable and deprecated. The customer should uninstall MSXML 4.0 and then verify that the server still functions. The recommended way to do this is to run this command to find all MSXM 4.0 binaries: dir c:\*msxml4*.* /s /b Then rename all msxml4.dll found to msxml4.dll.old. If anything breaks the DLLs can be renamed back. See also: https://msdn.microsoft.com/en-us/library/jj152146(v=vs.85).aspx https://en.wikipedia.org/wiki/MSXML .Net can be updated without any issues