Hello
We are using 18c XE. We can see log4j2 in /opt/oracle/product/18c/dbhomeXE/md/property_graph/lib/log4j-core-2.9.0.jar .
However it's not probably a web app and the vulnerability is for web apps.
Can someone please help me understand if a workaround would be required as XE don't have patches?
Regards,
Zulqarnain