CVE:CVE-2021-4104
CNNVD:CNNVD-202112-1011
Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。
Apache Log4j 1.2存在代码问题漏洞，攻击者可利用该漏洞通过JMSApender反序列化来运行代码。
solution:Upgrade apache log4j to a higher version than 1.2,and avoid the version 1.2; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade redhat codeready_studio to a higher version than 12.0,and avoid the version 12.0; Upgrade redhat integration_camel_k to a higher version than -; Upgrade redhat integration_camel_quarkus to a higher version than -; Upgrade redhat jboss_a-mq to a higher version than 6.0.0,7,and avoid the version 6.0.0,7; Upgrade redhat jboss_a-mq_streaming to a higher version than -; Upgrade redhat jboss_data_grid to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat jboss_data_virtualization to a higher version than 6.0.0,and avoid the version 6.0.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 6.0.0,7.0,and avoid the version 6.0.0,7.0; Upgrade redhat jboss_fuse to a higher version than 6.0.0,7.0.0,and avoid the version 6.0.0,7.0.0; Upgrade redhat jboss_fuse_service_works to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat jboss_operations_network to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat jboss_web_server to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat openshift_container_platform to a higher version than 4.6,4.7,4.8,and avoid the version 4.6,4.7,4.8; Upgrade redhat process_automation to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat single_sign-on to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat software_collections to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade oracle advanced_supply_chain_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle business_intelligence to a higher version than 5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle business_process_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_eagle_ftp_table_base_retrieval to a higher version than 4.5,and avoid the version 4.5; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1; Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version 7.3.6; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.4.0,12.0.0.5.0,and avoid the version (,12.0.0.4.0),12.0.0.5.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.4,7.3.5,7.4.1,7.4.2,and avoid the version 7.3.4,7.3.5,7.4.1,7.4.2; Upgrade oracle e-business_suite_cloud_manager_and_cloud_backup_module to a higher version than 2.2.1.1.1,and avoid the version 2.2.1.1.1; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,13.5.0.0,and avoid the version 13.4.0.0,13.5.0.0; Upgrade oracle financial_services_revenue_management_and_billing_analytics to a higher version than 2.7.0.0,2.7.0.1,2.8.0.0,and avoid the version 2.7.0.0,2.7.0.1,2.8.0.0; Upgrade oracle fusion_middleware_common_libraries_and_tools to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle goldengate to a higher version than -; Upgrade oracle healthcare_data_repository to a higher version than 8.1.0,and avoid the version 8.1.0; Upgrade oracle hyperion_data_relationship_management to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle identity_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle jdeveloper to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.29,and avoid the version (,8.0.29]; Upgrade oracle retail_allocation to a higher version than 14.1.3.2,15.0.3.1,16.0.3,19.0.1,and avoid the version 14.1.3.2,15.0.3.1,16.0.3,19.0.1; Upgrade oracle retail_extract_transform_and_load to a higher version than 13.2.5,and avoid the version 13.2.5; Upgrade oracle stream_analytics to a higher version than -; Upgrade oracle timesten_grid to a higher version than -; Upgrade oracle tuxedo to a higher version than 12.2.2.0.0,and avoid the version 12.2.2.0.0; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1,and avoid the version 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0