we have to replace the log4j-core file with latest version log4j-2.17 to avoid vulnerability.
we are just replacing the file at the the path product\12.1.0\dbhome_1\ccr\lib\log4j-core.jar
with product\12.1.0\dbhome_1\ccr\lib\log4j-2.17.jar.
is this sufficient to change the version of log4j or anything else we need to do ?