Why does RXOP depend on outdated libraries?
The RXOP deliverable contains two servlet packages intended for use on the deprecated SDK/J platform: rxconfServlet and rxspServlet. At least one of these has a dependency on the BouncyCastle Provider library bcprov-jdk14-152.jar.
Sometimes an automated scan or manual inspection of this library will reveal that, as of RXOP v3.8.9, there are a number of known security issues with this dependency.