My Oracle Support Banner

Oracle Documaker Apache Log4j 1.x Vulnerabilities (Doc ID 2979972.1)

Last updated on OCTOBER 24, 2023

Applies to:

Oracle Documaker - Version 12.6.4 and later
Information in this document applies to any platform.

Goal

A security scan of the Oracle Documaker servers is indicating the servers are running a version of Apache Log4j that is no longer supported.

It indicates that Log4j is in use, which has been out of support since October 2015. This is the jar file being flagged:

C:\Oracle\odee_1\oui\jlib\jlib\log4j-core.jar Installed version : 1.1.1
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.