fix whitesoure vulnerabilities

CORE:
| jackson-databind-2.9.9.jar
| hibernate-validator-6.0.17.Final.jar
| spring-web-5.1.9.RELEASE.jar
| elasticsearch-6.6.2.jar
| snakeyaml-1.23.jar
| commons-codec-1.11.jar
| tomcat-embed-core-9.0.21.jar
| netty-codec-4.1.38.Final.jar
| resteasy-jaxrs-3.6.2.Final.jar
| spring-security-core-5.1.6.RELEASE.jar
AZURE:
| jackson-databind-2.9.9.jar
| netty-codec-http-4.1.38.Final.jar
| reactor-netty-0.8.10.RELEASE.jar
| netty-codec-http2-4.1.38.Final.jar
| hibernate-validator-6.0.12.Final.jar
| elasticsearch-6.4.3.jar
| spring-web-5.1.9.RELEASE.jar
| snakeyaml-1.23.jar
| commons-codec-1.11.jar
| tomcat-embed-core-9.0.22.jar
| netty-codec-4.1.38.Final.jar
| log4j-core-2.11.2.jar
| resteasy-jaxrs-3.6.2.Final.jar 

Note: elasticsearch v6.8.1 due to infra limitation