Attention: To align with new corporate security policies, and to match policies adopted by other communities within Oracle, the My Oracle Support Community access requirements will change beginning September 18, 2025. MOSC will now require that member accounts in our community be associated to a *corporate* email address. This means that users with generic domains (such as gmail.com, yahoo.com, and others) will no longer be granted access to the discussion forums and ideas labs. If this policy affects you, act now to change the email address that is associated with your Oracle (and community) account. Alternatively, you can opt to create a new Oracle account that uses your corporate email domain.

Oracle Weblogic Server (MOSC)

Log4J CVE-2021-44228 security issue

Dec 13, 2021 1:45PM in Oracle Weblogic Server (MOSC) 4 commentsAnswered

Hello Team,

we are using weblogic 12 server and part of which uses com.bea.core.apache.log4j.jar, when we checked its using older version of log4j (1.x).

can someone tell us

what is impact of current issues(CVE-2021-44228) with com.bea.core.apache.log4j.jar

how do we fix this issue , do we have any patch ?

when this is upgraded to latest version ?

0

Howdy, Stranger!

To view full details, sign in to My Oracle Support Community.

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month