CVE:CVE-2022-23307
CNNVD:CNNVD-202201-1425
Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。
Apache log4j 1.x存在代码问题漏洞，该漏洞源于在log4j的chainsaw组件中某些日志条目的内容被反序列化并可能允许代码执行。攻击者可以在运行 chainsaw 组件时向服务器发送带有序列化数据的请求，进而执行恶意代码。
solution:Upgrade apache chainsaw to a higher version than 2.1.0,and avoid the version (,2.1.0); Upgrade apache log4j to a higher version than 2.0,and avoid the version [1.2,2.0); Upgrade qos reload4j to a higher version than 1.2.18.1,and avoid the version (,1.2.18.1); Upgrade oracle advanced_supply_chain_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle business_intelligence to a higher version than 5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle business_process_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_eagle_ftp_table_base_retrieval to a higher version than 4.5,and avoid the version 4.5; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.5.0,and avoid the version 10.0.1.5.0; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1; Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version 7.3.6; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.4.4,12.0.0.5.0,and avoid the version (,12.0.0.4.4),12.0.0.5.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.4.1,7.4.2,and avoid the version 7.4.1,7.4.2; Upgrade oracle e-business_suite_cloud_manager_and_cloud_backup_module to a higher version than 2.2.1.1.1,2.2.1.1.1,and avoid the version (,2.2.1.1.1),2.2.1.1.1; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,13.5.0.0,and avoid the version 13.4.0.0,13.5.0.0; Upgrade oracle financial_services_revenue_management_and_billing_analytics to a higher version than 2.7.0.0,2.7.0.1,2.8.0.0,and avoid the version 2.7.0.0,2.7.0.1,2.8.0.0; Upgrade oracle healthcare_foundation to a higher version than 8.1.0,and avoid the version 8.1.0; Upgrade oracle hyperion_data_relationship_management to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle identity_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle identity_manager_connector to a higher version than 11.1.1.5.0,and avoid the version 11.1.1.5.0; Upgrade oracle jdeveloper to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle middleware_common_libraries_and_tools to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.29,and avoid the version (,8.0.29]; Upgrade oracle retail_extract_transform_and_load to a higher version than 13.2.5,and avoid the version 13.2.5; Upgrade oracle tuxedo to a higher version than 12.2.2.0.0,and avoid the version 12.2.2.0.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0