Configuring Exploit Protection For Vulnerable Java and OpenSSL Versions

Question

Hello,

I was hoping a Microsoft expert could put me on the right direction to implement Exploit Protection for the following issues:

• Vulnerability exists because ***** installs outdated .jar files. To mitigate, Exploit Protection mitigations in Windows must be configured for all executables used by Java JRE.
• Vulnerability exists because ***** installs outdated versions (1.1.1a, 1.1.1k) of OpenSSL. To mitigate, Exploit Protection mitigations in Windows must be configured for all executables used by *****.

What specific settings would need to be turned on to mitigate the above vulnerabilities?

Thanks,

CJ

Answer 1

Hello,

Thank you for posting in Microsoft Support Community.

Based on the description, I understand your question is related to Exploit Protection. Since Exploit Protection is out of the scope of Microsoft Support Community, to get a quick and effective handling of your issue, it is recommended to repost your question in Microsoft Q&A, where there will be engineers to give you professional and effective replies.

https://learn.microsoft.com/en-us/answers/questions/

Thank you for your understanding and support. If you have any question or concern, please feel free to let us know.