erwin Data modeler vulnerability on xercesImpl.jar (4379748)

erwin Data modeler vulnerability on xercesImpl.jar - this file is in  Metaintegration MIMB package

xercesImpl.jar is used by the CognosRepository bridge and comes with this note:  https://metaintegration.net/Products/MIMM/OEM/MITI/License/MIMB-OEM-ThirdParty-LICENSES.html#Note1

The directory java\CognosRepository is exclusively used by the import bridge from IBM Cognos Content Manager. If this import bridge is not used, this directory can be safely deleted without any consequences for the other bridges

Remove directory java\CognosRepository if Import from Cognos Content Manager is not used in Import/export MIMB Bridge