Oracle Weblogic Server (MOSC)

MOSC Banner

Log4j-2.11.jar

Hi Community,

I've got Weblogic 12.2.1.4 running on Windows patched with Stack Patch Bundle 12.2.1.4.240405. I'm getting pinged by my Information Security Officer as Nessus scans are finding log4j-2.11.jar in %Oracle_Home%\oracle_common\modules\thirdparty\.

My question is, why is this file still hanging around if the appropriate patches have been applied? How do I remedy?

Thanks

Steve

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center