Veracode Scan issue with rfa.jar

Pulaputra.Sudheer

Hi Team,

When we do the veracode scan for our application using rfa.jar, veracode is reporting critical issue..PFA and let us know how to resolve this

Veracode Scan Critical Issues 7 Feb.xlsx

wasin.w

Hello @Pulaputra.Sudheer

This kind of issue should be investigated by the Real-Time APIs Support team (RDC). If you are the RDC named user, you can submit a support ticket to the team directly via https://developers.lseg.com/en/api-catalog/real-time-opnsrc/rt-sdk-java website by clicking on the "Contact premium support" button.

The choose Product as "RFA Java Edition".

Then the support team will contact you via a separate email loop.

Jirapongse

@Pulaputra.Sudheer

Thank you for reaching out to us.

First, you may try to upgrade the application to use the latest version of RFA Java (rfaj8.2.5.L2 and rfaj7.8.1.L2). You can download it from the Software Download. It is in the Product Family: MDS - API and Products: Robust Foundation API (RFA) - Java.

Normally Developer Community Forum is for how-to/general questions but your question seems to be more complex and requires investigation e.g. review source code, configuration, try to reproduce the problem etc.

I recommend you raise a query through the premium support service. If you are a named user of that service,you should see a link "Contact Premium Support" when you are logged into the developer portal.

For any difficulties submitting the query to the Premium Sypport (RDC), please contact your LSEG account team or sales team directly.

Pulaputra.Sudheer

https://community.developers.refinitiv.com/discussion/comment/123951#Comment_123951

Hi Wasin

I have opened this link, but couldn't find "premium support" on the right. Currently my name is listed under RDC

wasin.w

https://community.developers.refinitiv.com/discussion/comment/123953#Comment_123953

Please contact your LSEG account or SALE team to help you with the RDC named user registration.

Alternatively, you can submit a support ticket to the Real-Time APIs Support team via https://myaccount.lseg.com/en/productsupport link.