CVE:CVE-2017-5645
CNNVD:CNNVD-201704-852
Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。
Apache Log4j 2.8.2之前的2.x版本中存在代码问题漏洞。攻击者可利用该漏洞执行任意代码。
solution:Upgrade apache log4j to a higher version than 2.8.2,and avoid the version [2.0,2.8.2); Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp service_level_manager to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade redhat fuse to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat enterprise_linux to a higher version than 6.0,6.7,7.0,7.3,7.4,7.5,7.6,and avoid the version 6.0,6.7,7.0,7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,7.6,and avoid the version 7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle autovue_vuelink_integration to a higher version than 21.0.0,21.0.1,and avoid the version 21.0.0,21.0.1; Upgrade oracle banking_platform to a higher version than 2.6.0,2.6.1,2.6.2,and avoid the version 2.6.0,2.6.1,2.6.2; Upgrade oracle bi_publisher to a higher version than 11.1.1.7.0,11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.7.0,11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_converged_application_server_-_service_controller to a higher version than 6.1,and avoid the version 6.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.3.0,and avoid the version 10.0.1.3.0; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.2,and avoid the version [6.0,6.2]; Upgrade oracle communications_messaging_server to a higher version than 8.0.2,and avoid the version (,8.0.2); Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version [7.3.2,7.3.6]; Upgrade oracle communications_online_mediation_controller to a higher version than 6.1,and avoid the version 6.1; Upgrade oracle communications_pricing_design_center to a higher version than 11.1,12.0,and avoid the version 11.1,12.0; Upgrade oracle communications_service_broker to a higher version than 6.0,and avoid the version 6.0; Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2,and avoid the version (,7.2); Upgrade oracle configuration_manager to a higher version than 12.1.2.0.2,12.1.2.0.5,and avoid the version 12.1.2.0.2,12.1.2.0.5; Upgrade oracle endeca_information_discovery_studio to a higher version than 3.2.0,and avoid the version 3.2.0; Upgrade oracle enterprise_data_quality to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5,13.2.0.0,and avoid the version 12.1.0.5,13.2.0.0; Upgrade oracle enterprise_manager_for_fusion_middleware to a higher version than 12.1.0.5,13.2.0.0,and avoid the version 12.1.0.5,13.2.0.0; Upgrade oracle enterprise_manager_for_mysql_database to a higher version than 13.2.2.0.0,and avoid the version (,13.2.2.0.0]; Upgrade oracle enterprise_manager_for_oracle_database to a higher version than 12.1.0.8,13.2.2,and avoid the version 12.1.0.8,13.2.2; Upgrade oracle enterprise_manager_for_peoplesoft to a higher version than 13.1.1.1,13.2.1.1,and avoid the version 13.1.1.1,13.2.1.1; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 7.3.3.0.2,8.0.7.0.0,and avoid the version [7.3.3.0.0,7.3.3.0.2],[8.0.0.0.0,8.0.7.0.0]; Upgrade oracle financial_services_behavior_detection_platform to a higher version than 8.0.4.0.0,6.1.1,and avoid the version [8.0.0.0.0,8.0.4.0.0],6.1.1; Upgrade oracle financial_services_hedge_management_and_ifrs_valuations to a higher version than 8.0.4,8.0.5,and avoid the version 8.0.4,8.0.5; Upgrade oracle financial_services_lending_and_leasing to a higher version than 14.8.0,12.5.0,and avoid the version [14.1.0,14.8.0],12.5.0; Upgrade oracle financial_services_loan_loss_forecasting_and_provisioning to a higher version than 8.0.4,8.0.5,and avoid the version 8.0.4,8.0.5; Upgrade oracle financial_services_profitability_management to a higher version than 8.0.7.0.0,6.1.1,and avoid the version [8.0.0.0.0,8.0.7.0.0],6.1.1; Upgrade oracle financial_services_regulatory_reporting_with_agilereporter to a higher version than 8.0.9.2.0,and avoid the version 8.0.9.2.0; Upgrade oracle flexcube_investor_servicing to a higher version than 12.0.4,12.1.0,12.3.0,12.4.0,14.0.0,and avoid the version 12.0.4,12.1.0,12.3.0,12.4.0,14.0.0; Upgrade oracle fusion_middleware_mapviewer to a higher version than 12.2.1.2,12.2.1.3,and avoid the version 12.2.1.2,12.2.1.3; Upgrade oracle goldengate to a higher version than 12.3.2.1.1,and avoid the version 12.3.2.1.1; Upgrade oracle goldengate_application_adapters to a higher version than 12.3.2.1.1,and avoid the version 12.3.2.1.1; Upgrade oracle identity_analytics to a higher version than 11.1.1.5.8,and avoid the version 11.1.1.5.8; Upgrade oracle identity_management_suite to a higher version than 11.1.2.3.0,12.2.1.3.0,and avoid the version 11.1.2.3.0,12.2.1.3.0; Upgrade oracle identity_manager_connector to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle in-memory_performance-driven_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle instantis_enterprisetrack to a higher version than 17.3,and avoid the version [17.1,17.3]; Upgrade oracle insurance_calculation_engine to a higher version than 10.1.1,10.2.1,and avoid the version 10.1.1,10.2.1; Upgrade oracle insurance_policy_administration to a higher version than 10.0,10.1,10.2,11.0,and avoid the version 10.0,10.1,10.2,11.0; Upgrade oracle insurance_rules_palette to a higher version than 10.0,10.1,10.2,11.0,11.1,and avoid the version 10.0,10.1,10.2,11.0,11.1; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 4.0.1.0,9.2,and avoid the version 4.0.1.0,9.2; Upgrade oracle jdeveloper to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 3.4.7.4297,4.0.4.5235,8.0.0.8131,and avoid the version [3.4.0.0,3.4.7.4297],[4.0.0.0,4.0.4.5235],[8.0.0.0.0,8.0.0.8131]; Upgrade oracle peoplesoft_enterprise_fin_install to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle policy_automation to a higher version than 10.4.7,12.1.0,12.1.1,12.2.0,12.2.1,12.2.2,12.2.3,12.2.4,12.2.5,12.2.6,12.2.7,12.2.8,12.2.9,12.2.10,and avoid the version 10.4.7,12.1.0,12.1.1,12.2.0,12.2.1,12.2.2,12.2.3,12.2.4,12.2.5,12.2.6,12.2.7,12.2.8,12.2.9,12.2.10; Upgrade oracle policy_automation_connector_for_siebel to a higher version than 10.4.6,and avoid the version 10.4.6; Upgrade oracle policy_automation_for_mobile_devices to a higher version than 10.4.7,12.1.0,12.1.1,12.2.0,12.2.1,12.2.2,12.2.3,12.2.4,12.2.5,12.2.6,12.2.7,12.2.8,12.2.9,12.2.10,and avoid the version 10.4.7,12.1.0,12.1.1,12.2.0,12.2.1,12.2.2,12.2.3,12.2.4,12.2.5,12.2.6,12.2.7,12.2.8,12.2.9,12.2.10; Upgrade oracle primavera_gateway to a higher version than 16.2.11,17.12.7,and avoid the version [16.2.0,16.2.11],[17.12.0,17.12.7]; Upgrade oracle rapid_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle retail_advanced_inventory_planning to a higher version than 14.0,15.0,and avoid the version 14.0,15.0; Upgrade oracle retail_clearance_optimization_engine to a higher version than 14.0.5,and avoid the version 14.0.5; Upgrade oracle retail_extract_transform_and_load to a higher version than 13.0,13.1,13.2,19.0,and avoid the version 13.0,13.1,13.2,19.0; Upgrade oracle retail_integration_bus to a higher version than 14.0.0,14.1.0,15.0,16.0,and avoid the version 14.0.0,14.1.0,15.0,16.0; Upgrade oracle retail_open_commerce_platform to a higher version than 5.3.0,6.0.0,6.0.1,and avoid the version 5.3.0,6.0.0,6.0.1; Upgrade oracle retail_predictive_application_server to a higher version than 15.0.3,and avoid the version 15.0.3; Upgrade oracle retail_service_backbone to a higher version than 14.1,15.0,16.0,and avoid the version 14.1,15.0,16.0; Upgrade oracle siebel_ui_framework to a higher version than 18.7,18.8,18.9,and avoid the version 18.7,18.8,18.9; Upgrade oracle soa_suite to a higher version than 12.1.3.0.0,12.2.1.3.0,12.2.2.0.0,and avoid the version 12.1.3.0.0,12.2.1.3.0,12.2.2.0.0; Upgrade oracle tape_library_acsls to a higher version than 8.4,and avoid the version 8.4; Upgrade oracle timesten_in-memory_database to a higher version than 11.2.2.8.49,and avoid the version 11.2.2.8.49; Upgrade oracle utilities_advanced_spatial_and_operational_analytics to a higher version than 2.7.0.1,and avoid the version 2.7.0.1; Upgrade oracle utilities_work_and_asset_management to a higher version than 1.9.1.2.12,and avoid the version 1.9.1.2.12; Upgrade oracle weblogic_server to a higher version than 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0