Oracle Weblogic Server (MOSC)

MOSC Banner

Will com.bea.core.apache.log4j.jar be upgraded to log4j2?

Our security engineers are scanning our servers for log4j issues and have listed a few hits under our WebLogic installation.

Does anyone know if there's a plan to upgrade the packages below to log4j2 instead, and when that might happen?

  • .../Oracle_Home/oracle_common/modules/com.bea.core.apache.log4j.jar
  • .../Oracle_Home/oracle_common/modules/oracle.owasp/com-bea-core-apache-log4j.jar
  • .../Oracle_Home/wlserver/server/lib/consoleapp/APP-INF/lib/log4j-1.2.17-16.jar

Thanks!

Product: Oracle WebLogic 12.2.1.4

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center