My Oracle Support Banner

Log4j Vulnerability Threat Did Not Solve After Installing Patch 34388059 As Suggested (Doc ID 2903633.1)

Last updated on OCTOBER 24, 2022

Applies to:

Oracle Financial Services Crime and Compliance Management Studio - Version 8.0.8.3.0 and later
Information in this document applies to any platform.

Symptoms

Log4j vulnerability threat did not solve after installing patch 34388059

Steps to reproduce:
1.Install the ML  34388059

2. Install the log4j  patch 33684419

Expected result:

The log4j issue should resolve.

Actual result:
The log4j issue didnt resolve.


Files present:

/fccstudio/OFS_FCCM_STUDIO/authservice/lib/log4j-core-2.11.2.jar 

/fccstudio/OFS_FCCM_STUDIO/batchservice/lib/log4j-core-2.11.2.jar 

/fccstudio/OFS_FCCM_STUDIO/datastudio/agent/lib/log4j-core-2.11.2.jar 

/fccstudio/OFS_FCCM_STUDIO/datastudio/server/lib/log4j-core-2.11.2.jar 

/fccstudio/OFS_FCCM_STUDIO/interpreters/interpreter/fcc-pgx-algorithm/log4j-core-2.11.2.jar 

/fccstudio/OFS_FCCM_STUDIO/metaservice/lib/log4j-core-2.11.2.jar

/fccstudio/OFS_FCCM_STUDIO/sessionservice/lib/log4j-core-2.11.2.jar 

 

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.