log4j

opatch hangs while patching OEM 13.4. concerning the log4j-vulnerability

By Clemens Bleile To address the log4j-vulnerability I recently had to fix the Oracle Enterprise Manager 13.4.-installation for a customer. REMARK: Please check the following link for details concerning the log4j-vulnerability and how Oracle is affected: alert-cve-2021-44228 and(…)

log4shell: Determine affection, mitigate, example: Oracle Unified Directory

This post is about two security vulnerabilities reported on log4j 2.x framework: CVE-2021-44228, with a base score 10 (of 10 max.) in CVSS version 3.1 risk, and CVE-2021-45046, base scored 9. I will list some ways to determine affection, how(…)