CVE:CVE-2020-9488
CNNVD:CNNVD-202004-2164
Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。
Apache Log4j 中存在信任管理问题漏洞，该漏洞源于SmtpAppender没有验证主机名称与SMTPS连接的SSL/TLS证书是否匹配。攻击者可通过实施中间人攻击利用该漏洞拦截SMTPS连接，获取日志消息。
solution:Upgrade apache log4j to a higher version than 2.3.2,2.12.3,2.13.2,and avoid the version [2.0,2.3.2),[2.4,2.12.3),[2.13.0,2.13.2); Upgrade oracle communications_application_session_controller to a higher version than 3.9m0p1,and avoid the version 3.9m0p1; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5.0.23.0,12.0.0.3.0,and avoid the version 7.5.0.23.0,12.0.0.3.0; Upgrade oracle communications_eagle_ftp_table_base_retrieval to a higher version than 4.5,and avoid the version 4.5; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.0,7.4.0,and avoid the version 7.3.0,7.4.0; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle enterprise_manager_for_peoplesoft to a higher version than 13.4.1.1,and avoid the version 13.4.1.1; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.0.0.0,and avoid the version [8.0.6.0.0,8.1.0.0.0]; Upgrade oracle financial_services_institutional_performance_analytics to a higher version than 8.0.6,8.1.0,8.7.0,and avoid the version 8.0.6,8.1.0,8.7.0; Upgrade oracle financial_services_market_risk_measurement_and_management to a higher version than 8.0.6,8.0.8,8.1.0,and avoid the version 8.0.6,8.0.8,8.1.0; Upgrade oracle financial_services_price_creation_and_discovery to a higher version than 8.0.6,8.0.7,and avoid the version 8.0.6,8.0.7; Upgrade oracle financial_services_retail_customer_analytics to a higher version than 8.0.6,and avoid the version 8.0.6; Upgrade oracle flexcube_core_banking to a higher version than 11.7.0,5.2.0,and avoid the version [11.5.0,11.7.0],5.2.0; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle health_sciences_information_manager to a higher version than 3.0.1,and avoid the version 3.0.1; Upgrade oracle insurance_insbridge_rating_and_underwriting to a higher version than 5.6.0.0,5.6.1.0,and avoid the version [5.0.0.0,5.6.0.0],5.6.1.0; Upgrade oracle insurance_policy_administration_j2ee to a higher version than 10.2.0.37,10.2.4.12,11.0.2.25,11.1.0.15,11.2.0.26,and avoid the version 10.2.0.37,10.2.4.12,11.0.2.25,11.1.0.15,11.2.0.26; Upgrade oracle insurance_rules_palette to a higher version than 10.2.0.37,10.2.4.12,11.0.2.25,11.1.0.15,11.2.0.26,and avoid the version 10.2.0.37,10.2.4.12,11.0.2.25,11.1.0.15,11.2.0.26; Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle oracle_goldengate_application_adapters to a higher version than 19.1.0.0.0,and avoid the version 19.1.0.0.0; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade oracle policy_automation to a higher version than 12.2.20,and avoid the version [12.2.0,12.2.20]; Upgrade oracle policy_automation_connector_for_siebel to a higher version than 10.4.6,and avoid the version 10.4.6; Upgrade oracle policy_automation_for_mobile_devices to a higher version than 12.2.20,and avoid the version [12.2.0,12.2.20]; Upgrade oracle primavera_unifier to a higher version than 18.8,19.12,and avoid the version 18.8,19.12; Upgrade oracle retail_advanced_inventory_planning to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_assortment_planning to a higher version than 15.0.3.0,16.0.3.0,and avoid the version 15.0.3.0,16.0.3.0; Upgrade oracle retail_bulk_data_integration to a higher version than 15.0.3.0,16.0.3.0,and avoid the version 15.0.3.0,16.0.3.0; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 16.0,17.0,18.0,19.0,and avoid the version 16.0,17.0,18.0,19.0; Upgrade oracle retail_eftlink to a higher version than 15.0.2,16.0.3,17.0.2,18.0.1,19.0.1,and avoid the version 15.0.2,16.0.3,17.0.2,18.0.1,19.0.1; Upgrade oracle retail_insights_cloud_service_suite to a higher version than 19.0,and avoid the version 19.0; Upgrade oracle retail_integration_bus to a higher version than 14.1,15.0,16.0,and avoid the version 14.1,15.0,16.0; Upgrade oracle retail_order_broker_cloud_service to a higher version than 16.0,18.0,19.0,19.1,19.2,19.3,and avoid the version 16.0,18.0,19.0,19.1,19.2,19.3; Upgrade oracle retail_predictive_application_server to a higher version than 14.1.3.0,15.0.3.0,16.0.3.0,and avoid the version 14.1.3.0,15.0.3.0,16.0.3.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 15.0.4,16.0.6,17.0.4,18.0.3,19.0.2,and avoid the version 15.0.4,16.0.6,17.0.4,18.0.3,19.0.2; Upgrade oracle siebel_apps_-_marketing to a higher version than 21.9,and avoid the version (,21.9]; Upgrade oracle siebel_ui_framework to a higher version than 21.2,and avoid the version (,21.2]; Upgrade oracle spatial_and_graph to a higher version than 12.2.0.1,18c,19c,and avoid the version 12.2.0.1,18c,19c; Upgrade oracle storagetek_acsls to a higher version than 8.5.1,and avoid the version 8.5.1; Upgrade oracle storagetek_tape_analytics_sw_tool to a higher version than 2.3.1,and avoid the version 2.3.1; Upgrade oracle utilities_framework to a higher version than 4.3.0.6.0,2.2.0.0.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,4.4.0.2.0,and avoid the version [4.3.0.1.0,4.3.0.6.0],2.2.0.0.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,4.4.0.2.0; Upgrade oracle weblogic_server to a higher version than 10.3.6.0.0,and avoid the version 10.3.6.0.0; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade qos reload4j to a higher version than 1.2.18.3,and avoid the version (,1.2.18.3)