Customer has execute action plan as per ID 2902387.1 but issue persist
Our tenable scans keep flagging this as an issue. I have added an attachment that lists the issues for log4j. I have been trying to understand the proper way to solve this issue. I looked up the issue and came across the following articles and I went and tried the updates.
I tried this one.
EM 13c: Log4j Files 'com-bea-core-apache-log4j.jar' Are Not Upgraded with EM 13.5 RU8 Patch (Doc ID 2902387.1)
Agent:
a) Apply OCT 2022 WLS PATCH SET UPDATE 12.2.1.4.220929 Patch 34653267 or later (Only for OMS central Agent)
b) Apply OCT 2022 FMW Thirdparty Bundle Patch 12.2.1.4.220915 Patch 34604561 or later (Only for OMS central Agent)
I tried 34653267 which was superseded by 37087476 and installed that one. I then looked at 34604561 and it was superseded by 37103277 so I installed that one. It seems that in both instances this part of the output shows log4j was upgraded.
Patching component oracle.log4j.log4j, 2.11.1.0.0...
Patching component oracle.log4j.log4j, 2.11.1.0.0...
What is the best way to patch this properly?