Microsoft XML Parser (MSXML) and XML Core Services Unsupported vulnerability

Question

_{Tuesday, April 4, 2017 2:00 PM}

We have 251 machines with the XML Parser XML core services unsupported vulnerability and the issue needs remediation however I have not been able to find any solution. I would like to be able to update any outdated versions without breaking any applications which might use them.

All replies (4)

_{Wednesday, April 5, 2017 8:44 AM}

Hi Rattler，

>I would like to be able to update any outdated versions without breaking any applications which might use them.

Windows update may update related system files, when installing the update, the old system file may be replaced by the new one in the update. So, some updates need a restart may used to avoid application crash, windows will replace the system files while no other application is using the related system file.

If you mean update the specific application, then, you'd turn to the application community for better help.

Best Regards,

Anne

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, April 19, 2017 2:27 AM}

Hi,

Just to check if the above reply could be of help? If yes, you may mark useful reply as answer, if not, welcome to feedback.

Best Regards,

Anne

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, June 13, 2017 1:32 PM}

Did you ever resolve your issue with this? We are looking to do the same thing and are wondering what your solution was.

Thank you

_{Thursday, February 1, 2018 10:24 AM}

We have noticed that there are vulnerabilities on servers related to MSXML in Tenable reports and there is no clarity about which version needs to be installed or if it is safe to uninstall the installed version from the server or not however I found that this below article which confirms that “MSXML 6.0 ships with Microsoft Windows, except Windows Server 2003. Windows Server 2003 users may download MSXML 6.0 from the Microsoft Download Center”.

What's New in MSXML

https://msdn.microsoft.com/en-us/library/windows/desktop/ms753751(v=vs.85).aspx

We can safely remove the MSXML from the operating systems except Microsoft Windows Server 2003, however in case of any doubt we can always get in touch with the server owner and confirm.

In case if you want to determine the MSXML version that is installed on your computer, follow these steps:

Locate the Msxmlx.dll file in the following directory:

C:\Windows\System32

Right-click the Msxmlx.dll file, and then click Properties.

Click the Details tab to see the version information.

Thanks!

Thanks! Sachin Kumar (MSCE, MCSA) | Disclaimer: This posting is provided AS IS with no warranties or guarantees.