CVE-2017-9805 - is SC+ vulnerable?

Hi

CVE-2017-9805 relates to a Remote Code Execution vulnerability in the Apache Struts framework.

Please can you confirm if SC+ is vulnerable, and if it is, the timescale for fixing it. If it is vulnerable, are there any mitigations one can take (e.g. product configuration) to prevent exploitation.

Thanks

Chris