WinSCP 5.19.2 vulnerability issue under BizTalk Server 2020 CU3

Question

Hi Everyone,

Currently we use BizTalk Server 2020 CU3 with WinSCP 5.19.2

Our security sofware called Qualys found WinSCP 5.19.2 vulnerable and it is said that it would be updated to WinSCP 6.3.3.

Is WinSCP 6.3.3 compatible with BizTalk 2020 CU3 or we definitely need to upgrade BizTalk to CU5?

Answer 1

Hello,

According to the Microsoft BizTalk Server 2020 Update document, the corresponding external dependencies are as follows:

Update 3 for Microsoft BizTalk Server 2020	WinSCP 5.19.2

Update 5 for Microsoft BizTalk Server 2020	WinSCP 6.1.2

As there are no engineers dedicated to Microsoft BizTalk Server in this forum. For further confirmation, I suggest posing your inquiry once more within the Microsoft Q&A forum.

Here is the link: Questions - Microsoft Q&A

Click the "Ask a Question" button in the upper right corner to ask a question, then select the tag below.

References:

KB5007969 - Cumulative Update 3 for Microsoft BizTalk Server 2020 - Microsoft Support

KB5032870 - Cumulative Update 5 for Microsoft BizTalk Server 2020 - Microsoft Support

I hope this helps.

Best regards,

Jacen Wang

Answer 2

Hi Jacen,

Thank you very much for the information and your tips.

Best regards
Tibor

Answer 3

Hi Jacen,

I posted my BizTalk issue on the Microsoft Q&A forum, but nobody answers it.
Can you recommend me another living BizTalk forum?

Answer 4

Hello, here is a documentation you can refer to: Getting BizTalk Server Assistance.

Answer 5

Thank you, but this page seems a bit old, maybe outdated.