Applied 34974729 to FMW 12.2.1.4 using spbat (Jan 2023 updates) - EM broken
After applying the quarterly updates for Weblogic Server/FMW 12.2.1.4 the Enterprise Manager 12c console fails to start.
It uses:
$MW_HOME/oracle_common/modules/com.bea.core.apache.log4j.jar (version 1 of log4j).
The main patch overwrites the jar file with a stub containing just a Manifest file.
This is to address security vulnerabilities, but as it is not a fix, it causes the /em console to be broken.
I fixed it by copying in an old file, but this reintroduces the vulnerability.
I can see 3 possible solutions
- Run FMW with em permanently broken
- Patch the file com.bea.core.apache.log4j.jar "properly"