Vulnerability Issue on Enterprise Vault

Dear all

We already implement EV to our customer, then wen want to go live they doing Pentest to assest all security issue on enterprise vault. 
They access enteprise vault search and found some vulnerability with low score based on CVSS (Common Vulnerability Scoring System),

i want to ask to you guys, did you found same issue when implement EV ? and How we fix this issue ?
I use latest version of EV 12.3.2

Thank you