AlertsOracle Security Advisory

Number: AV21-650
Date: 22 December 2021

On 10 December 2021 Oracle published a Security Advisory to address critical vulnerabilities which may affect multiple products using the Apache Log4j logging utility.

Exploitation of these vulnerabilities could lead to remote code execution.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates when available.

Oracle Security Alert Advisory (CVE-2021-44228)
https://www.oracle.com/security-alerts/alert-cve-2021-44228.html

Active Exploitation of Apache Log4j Vulnerability (AL21-019)
https://cyber.gc.ca/en/alerts/active-exploitation-apache-log4j-vulnerability

 

Date modified: