TFA Installation and latest Alert CVE-2021-44228 involving log4j.jar
Apache Log4j Security Alert CVE-2021-44228 Products and Versions (Doc ID 2827611.1)
is the latest Security Alert and it is flagging jar files in the ORACLE_HOME suptools and md (Spatial) directories and the oracle_ahf directory typically installed in ORACLE_BASE. The databases are 19.6 to 19.13