Vulnerability for Microsoft XML Parser (MSXML) and XML Core Services Unsupported

Introduction

A critical vulnerability has been identified with the Microsoft XML Parser (MSXML) and XML Core
Services Unsupported.

Lack of support implies that no new security patches for the product will be released by the vendor. As
a result, it is likely to contain security vulnerabilities.

Note that support for MSXML 3.0 and 6.0 is based on the support policy of the operating system on
which it is installed. Support for MSXML 5.0 is based on the Microsoft Office lifecycle policy.

Solution

Upgrade the software packages responsible for the unsupported DLL versions or upgrade to a
supported version of Windows (Vista / 2008 or later). Alternatively, uninstall the outdated MSXML or
XML Core Services.

AMAG Response

For the MSXML parser issue this normally depending on the OS version we have found that MSXML6
is pre-loaded by Windows 10 or above.

AMAG Engineering tested removal of MSXML4 on v8.1 which is installed and Symmetry still works
falling back on the windows version.

Customer may remove as long as they still have an MSXML installed on the OS.