Apache log4j

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Apache log4j

satish
Dear erman,

Is log4j used in r12.2 and r11.1.3 ebs?

Thank you
Reply | Threaded
Open this post in threaded view
|

Re: Apache log4j

ErmanArslansOracleBlog
Administrator
If you are asking about log4j vulnerability, my answer is yes.. EBS is affected.
Follow the case from the following MOS doc ->

Apache Log4j Security Alert CVE-2021-44228 Products and Versions (Doc ID 2827611.1)

EBS listed in "Oracle products with patches pending".. So there is no patch available yet, but Oracle is working on it.