Log4j alerts in prod oracle apps

Posted by Mohammed Hamed on Jul 26, 2024; 1:23am
URL: http://erman-arslan-s-oracle-forum.124.s1.nabble.com/Log4j-alerts-in-prod-oracle-apps-tp12605.html

Hi Erman,

we are getting lot of incidents from our application servers related to the log4j files on our machines.

  Path                                   : /u01/app/oracle/fs1/FMW_Home/oracle_common/sysman/jlib/log4j-core.jar
  Installed version                      : 1.2.13
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/EBSapps/10.1.2/sysman/jlib/log4j-core.jar
  Installed version                      : 1.1.1
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/utils/bsu/cache_dir/RAWM.jar
  Installed version                      : 1.2.8
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/utils/bsu/bsu_update/GA/modules/com.bea.core.apache.log4j_1.2.13.jar
  Installed version                      : 1.2.13
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/utils/bsu/bsu_update/Patch/modules/com.bea.core.apache.log4j_1.2.13.jar
  Installed version                      : 1.2.13
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/utils/ccr/lib/log4j-core.jar
  Installed version                      : 1.1.1
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/webtier/OPatch/ocm/lib/log4j-core.jar
  Installed version                      : 1.1.1
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/webtier/OPatch_20230203200100/ocm/lib/log4j-core.jar
  Installed version                      : 1.1.1
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/webtier/oui/jlib/jlib/log4j-core.jar
  Installed version                      : 1.1.1
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/webtier/ccr/lib/log4j-core.jar
  Installed version                      : 1.1.1
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



  Path                                   : /u01/app/oracle/fs1/FMW_Home/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/log4j-1.2.17-16.jar
  Installed version                      : 1.2.17
  Security End of Life                   : August 5, 2015
  Time since Security End of Life (Est.) : >= 8 years



Please advise which patch i need to apply to fix those, we have ebs 12.2.10