obsolete key exchange (RSA), and an obsolete cipher (AES_128_CBC with HMAC-SHA1)

I tried to open a web portal of an organisation, and found a security issue "obsolete key exchange (RSA), and an obsolete cipher (AES_128_CBC with HMAC-SHA1)". I haven't noticed this scenario before.This portal carries confidential data. Suggest the steps to resolve the issue.(of vital importance)