OEM13.5 Qualys scan reports EOL/Obsolete Software: Apache Log4j 1.X Detected
Hi Experts,
we have Qualys which scans daily on OEM Cloud control 13.5 and is reporting "EOL/Obsolete Software: Apache Log4j 1.X Detected", I have patched OEM with latest patches as listed below, could you please let me know how to remediate this issue or upgrade to log4j 2.X
Latest OMS Patch - - 13.5.0 Enterprise Manager Cloud Control Base Platform Monthly Release Update (RU) 14 (Doc ID 2939259.1)
Latest Agent Patch - - Enterprise Manager Cloud Control Management Agent 13.5 Release Update (RU) 14 Bug List (Doc ID 2939260.1)
Refer : Enterprise Manager 13.5 Main Release Update List (Includes Plug-ins) (Doc ID 2760230.2)
Latest Patches for other OEM FMW Components are as below.