diff --git a/CHANGELOG.md b/CHANGELOG.md
index 78d64ae0176a9..2256aa4c2986f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -86,6 +86,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `org.jline:jline` from 3.30.6 to 4.0.0 ([#20800](https://github.com/opensearch-project/OpenSearch/pull/20800))
 - Bump `com.netflix.nebula.ospackage-base` from 12.2.0 to 12.3.0 ([#20799](https://github.com/opensearch-project/OpenSearch/pull/20799))
 - Bump `com.netflix.nebula:gradle-info-plugin` to 16.2.1 ([#20825](https://github.com/opensearch-project/OpenSearch/pull/20825))
+- Bump `com.sun.xml.bind:jaxb-impl` from 4.0.6 to 4.0.7 ([#20886](https://github.com/opensearch-project/OpenSearch/pull/20886))
 - Bump `lycheeverse/lychee-action` from 2.7.0 to 2.8.0 ([#20888](https://github.com/opensearch-project/OpenSearch/pull/20888))
 
 ### Removed
diff --git a/plugins/discovery-azure-classic/build.gradle b/plugins/discovery-azure-classic/build.gradle
index f4fc7be6de2f5..b0c0dc5f2035f 100644
--- a/plugins/discovery-azure-classic/build.gradle
+++ b/plugins/discovery-azure-classic/build.gradle
@@ -60,7 +60,7 @@ dependencies {
   api "com.sun.jersey:jersey-core:${versions.jersey}"
   api "com.sun.jersey:jersey-json:${versions.jersey}"
   api "org.codehaus.jettison:jettison:${versions.jettison}"
-  api 'com.sun.xml.bind:jaxb-impl:4.0.6'
+  api 'com.sun.xml.bind:jaxb-impl:4.0.7'
 
   // HACK: javax.xml.bind was removed from default modules in java 9, so we pull the api in here,
   // and allowlist this hack in JarHell
diff --git a/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1 b/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1
deleted file mode 100644
index 332ae274fc618..0000000000000
--- a/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-e81f27d58c769414bbc1ce88ddfb2cf822c8fa20
\ No newline at end of file
diff --git a/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1 b/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1
new file mode 100644
index 0000000000000..87b2a9b7d1dda
--- /dev/null
+++ b/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1
@@ -0,0 +1 @@
+58eef1bac3b2617da05d0d2b318b1a5050f47735
\ No newline at end of file