Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Is Apache log4j included in Apex or ORDS stack? (Critical vulnerability CVE-2021-44228)

Jose ArósteguiDec 13 2021

Hi experts,
We're using Apex 20.2 + ORDS 19.2.0.r1991647.
We'd like to know if Log4j is included in the tech stack as this critical vulnerability has been reported:
https://www.kaspersky.com/blog/log4shell-critical-vulnerability-in-apache-log4j/43124/
Thanks,
Jose.

This post has been answered by Paavo on Dec 13 2021

Added on Dec 13 2021

#apex-discussions

3 comments

4,852 views