Will com.bea.core.apache.log4j.jar be upgraded to log4j2?
Our security engineers are scanning our servers for log4j issues and have listed a few hits under our WebLogic installation.
Does anyone know if there's a plan to upgrade the packages below to log4j2 instead, and when that might happen?
- .../Oracle_Home/oracle_common/modules/com.bea.core.apache.log4j.jar
- .../Oracle_Home/oracle_common/modules/oracle.owasp/com-bea-core-apache-log4j.jar
- .../Oracle_Home/wlserver/server/lib/consoleapp/APP-INF/lib/log4j-1.2.17-16.jar
Thanks!
Product: Oracle WebLogic 12.2.1.4