What version on Business Object uses Apache Struts2 v 2.3.X or 2.5.x

Anyone know what versions of Buisness Object does not have the Apache Struts2 vulerability outlined in CVE-2017-5638