This patch includes the following updates.
ECM Services
- Resolved an issue of security risks by blocking unauthenticated access to exposed backup and source JAR files. (SECM-6923)
- Updated the vulnerable third-party JavaScript libraries to address security vulnerabilities. (SECM-6921)
IXOS Connector
- Resolved an issue where large documents (~2 GB or more) retrieved from the IXOS connector were loading only partially. (SECM-7087)
Java Core Server
- Resolved wrapper log files sajcs.out.log, sajcs.err.log, and sajcs.wrapper.log to include timestamps and have consistent formatting. (SECM-7074)
- Resolved a security issue caused by a hardcoded encryption key that was being used to protect sensitive data such as passwords. Refer to the readme file present in the ISO before installing or upgrading Saperion. (SECM-7010)
- Resolved an issue where loading documents with invalid xhdocs can cause invalid cache entries and incorrect folder creation. (SECM-6920)
- Resolved an issue where JCS was not starting correctly after a fresh EP7U2 installation due to missing database triggers. (SECM-7078)
- Fixed an issue where updating lookup table entries through Java Classic Connector with configured audit table caused a remote exception and prevented audit table entries from being created. (SECM-7009)
- Resolved an intermittent issue where an error occurred while archiving documents in the MediaDB. (SECM-7080)
- Resolved an issue where deleted users remain visible in the workflow selection until the Saperion server was restarted. (SECM-7114)
- Resolved an issue where archiving documents with legacy DDCs failed due to a system field type mismatch for SYSDATASIZE, which is defined as INTEGER in older DDCs and FLOAT in newer DDCs. (SECM-7124)
Plugins
- Resolved an issue where document purge does not delete DAT files from storage when UsePlugInFromMediaDB=false and documents were created with a different plugin name, post migrations to other storages ( such as NetApp/GenNAS/S3). (SECM-6922)
Rich Client
- Fixed an issue that caused drag‑and‑drop from Windows Explorer to the document tray to fail when folder or file names included umlauts or other special characters (such as Lithuanian characters). (SECM-7000)
- Fixed an issue where the configured MultiFormatViewer was not used in rare circumstances for index forms containing a result list and document preview pointing to a different definition. (SECM-6944)
- Fixed an issue where index fields were inactive for documents copied to the document tray while an active workflow was running. (SECM-7063)
- Fixed an issue where copying an element between structure windows did not generate a new document ID, causing access issues if the source document was purged. (SECM-7094)
Web Client
- Updated Apache Tika core to version 3.2.3 to mitigate critical XXE vulnerability CVE-2025-66516. (SECM-7073)
- Resolved an issue related to multivalue fields not closing with the arrow button after an update from EP7 to EP7U1. (SECM-6896)
- Resolved an issue where archiving failed when a multi-value lookup index field was left empty. (SECM-7083)
- Resolved an issue with field display and alignment differences between EP6 and EP7 for Chrome and Firefox browsers. (SECM-7034)
- Resolved an issue where the document preview feature in index form caused errors when using pdfjs viewer while uploading new documents. (SECM-7065)
Web Services
- Fixed an issue caused by an upgrade to EP7U2 that affected the SOAP response for getContent (ArchiveService / ContentService). (SECM-7113)