Re: Log4j alerts in prod oracle apps

Posted by ErmanArslansOracleBlog on Aug 05, 2024; 1:22pm
URL: http://erman-arslan-s-oracle-forum.124.s1.nabble.com/Log4j-alerts-in-prod-oracle-apps-tp12605p12608.html

Actually, standard logging for Oracle E-Business Suite does not use log4j. However, log4j is present in the Oracle E-Business Suite file system.
This may be due to your AD TXK level..
Your log4j versions seems old.
Please see -> CVE-2021-44228/CVE-2021-45046/CVE-2021-44832/CVE-2021-45105 Advisory for Oracle E-Business Suite (Apache log4j Vulnerabilities) (Doc ID 2827804.1)

Oracle E-Business Suite Release 12.2.x instances with R12.TXK.C.Delta.12 or later may be your fix for this.