Multiple vulnerabilities in Apache log4j affect IBM WebSphere Application Server which is bundled with IBM WebSphere Hybrid Edition(CVE-2021-45105, CVE-2021-44832). There is a vulnerability in the Apache log4j library used by IBM WebSphere Application Server traditional in the Admin Console and UDDI Registry application. This has been addressed in IBM WebSphere Application Server by removing log4j from the Admin Console and UDDI Registry application.
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Principal Affected Product(s) and Version(s) | Affected Product(s) and Version(s) |
---|---|
IBM WebSphere Hybrid Edition, all |
WebSphere Application Server
None
CPE | Name | Operator | Version |
---|---|---|---|
ibm websphere hybrid edition, all websphere application server | eq | 9.08.5 |