IBM WebSphere Portal 8.5 CF12 removes the Apache Axis library from the classpath
- 08 Aug, 2016
Due to security vulnerabilities in the Apache Axis V1.x libraries, IBM is removing the Axis JAR file from IBM WebSphere Portal 8.5 effective with Cumulative Fix 12. There is no product code that uses this library, but it has been on the classpath since the initial 8.5.0.0 release. The specific JAR to be removed is “axis.jar.”
The only exposure here is the chance that custom code, in either a custom theme or a custom portlet, would be using classes from this library. If there is no custom code in your Portal installation that is using these classes, then you will have no problems. If there is custom code in your Portal installation that is using these classes, then you will see ClassNotFoundException in the log files and will see some functional problems with that code.
More information on this link
