[PPP-4182] Use of vulnerable component dom4j-1.6.1.jar CVE-2018-1000632

assemblies/psw-ce/pom.xml

@@ -24,7 +24,6 @@
     <pdi.version>8.2.0.0-SNAPSHOT</pdi.version>
     <commons-xul.version>8.2.0.0-SNAPSHOT</commons-xul.version>
     <mondrian-schemaworkbench-plugins.version>8.2.0.0-SNAPSHOT</mondrian-schemaworkbench-plugins.version>
-    <jaxen.version>1.1</jaxen.version>
   </properties>
   <dependencies>
     <dependency>
@@ -228,13 +227,6 @@
     <dependency>
       <groupId>jaxen</groupId>
       <artifactId>jaxen</artifactId>
-      <version>${jaxen.version}</version>
-      <exclusions>
-        <exclusion>
-          <artifactId>*</artifactId>
-          <groupId>*</groupId>
-        </exclusion>
-      </exclusions>
     </dependency>
 
     <!-- change bellow scope to runtime to include database drivers -->

mondrian/pom.xml

@@ -77,9 +77,8 @@
       <version>${commons-vfs2.version}</version>
     </dependency>
     <dependency>
-      <groupId>dom4j</groupId>
+      <groupId>org.dom4j</groupId>
       <artifactId>dom4j</artifactId>
-      <version>${dom4j.version}</version>
     </dependency>
     <dependency>
       <groupId>javax.validation</groupId>

pom.xml

@@ -39,7 +39,6 @@
     <mockito-all.version>1.9.5</mockito-all.version>
     <commons-dbcp.version>1.2.1</commons-dbcp.version>
     <olap4j-xmlaserver.version>1.2.0</olap4j-xmlaserver.version>
-    <dom4j.version>1.6.1</dom4j.version>
     <dependency.postgres.revision>42.1.1</dependency.postgres.revision>
     <commons-logging.version>1.1.1</commons-logging.version>
     <eigenbase-xom.version>1.3.5</eigenbase-xom.version>