Impact in Oracle BRM 12 PS3 CVE-2021-44228 (Zero-day Vulnerability Related to Log4j Java Lib)
(Doc ID 2835326.1)
Last updated on JANUARY 31, 2022
Applies to:Oracle Communications Billing and Revenue Management - Version 18.104.22.168.0 and later
Information in this document applies to any platform.
One user has Pricing Design Center (PDC) 22.214.171.124.0 and Billing and Revenue Management (BRM) 126.96.36.199.0 deployed on the certified version of WebLogic.
There are vulnerable log4j libraries under WebLogic path, some of them related to WebLogic, but several of them related to BRM components installed by BRM installer:
1. The jar's found under weblogic /opt/webogic.
2. The jar's under /BRM/oracle/oracle/oracle_common/modules/thirdparty.
3. The jar's under /scratch/ri-user-2/opt/brm_driver/lib.
How to remove them?
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document