Skip to content
This repository has been archived by the owner on Jun 16, 2022. It is now read-only.

Latest commit

 

History

History
87 lines (84 loc) · 15.7 KB

software_list_o.md

File metadata and controls

87 lines (84 loc) · 15.7 KB

List of software (un)affected by the log4shell CVEs

About this list

0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

O

Supplier Product Version (see Status) Status CVE-2021-4104 Status CVE-2021-44228 Status CVE-2021-45046 Status CVE-2021-45105 Notes Links
Objectif Lune All Objectif Lune Blog Post
Obsidian Dynamics kafdrop All Investigation source
OCLC All All Not vuln Fix source
Octopus All Octopus Advisory
Ogest All All Not vuln Not vuln Not vuln Not vuln source
Okta Access Gateway Not vuln source
Okta AD Agent Not vuln source
Okta Advanced Server Access Not vuln source
Okta Browser Plugin Not vuln source
Okta IWA Web Agent Not vuln source
Okta LDAP Agent Not vuln source
Okta Mobile Not vuln source
Okta On-Prem MFA Agent <1.4.6 Not vuln Fix source fix
Okta Radius Server Agent 2.17.0 Not vuln Fix source/fix
Okta RADIUS Server Agent < 2.17.0 Vulnerable Okta RADIUS Server Agent CVE-2021-44228 Okta
Okta Verify Not vuln source
Okta Workflow Not vuln source
Okta Workflows Not vuln Not vuln Not vuln Not vuln Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security
Olympus Medical Products All Not Vuln source
OneSpan Authentication Appliance Vulnerable Fix availability will be announced soon source
OneSpan Authentication Server Vulnerable Fix availability will be announced soon source
OneSpan Digipass Gateway Vulnerable Fix availability will be announced soon source
OneSpan Mobile Security Suite 4.31.1 Not vuln Fix source
OneSpan Sign Vulnerable Fix availability will be announced soon source
Open Text Content Server 21.3, 21.4 Not vuln Vulnerable Mitigations are available, source
Open Text Extended ECM for Microsoft Office 365 21.3, 21.4 Not vuln Vulnerable Mitigations are available, source
Opengear All Opengear Link
openHAB All 3.0.4, 3.1.1 Not vuln Fix source
OpenMRS Talk 2.4.0-2.4.1 Vulnerable Mitigations are available, pending a new release source
OpenMRS TALK All OpenMRS TALK Link
OpenNMS Horizon (including derived Sentinels) < 29.0.3 Not vuln Fix Workarounds are available too for earlier versions source
OpenNMS Meridian (including derived Minions and Sentinels) < 2021.1.8, 2020.1.15, 2019.1.27 Not vuln Fix Workarounds are available too for earlier versions source
OpenNMS Minion appliance Not vuln Fix source
OpenNMS PoweredBy OpenNMS Not vuln Workaround source
Openpath (Motorola) All Not vuln Not vuln Not vuln Not vuln source
OpenSearch All < 1.2.1 Not vuln Fix source
OpenVPN All Not vuln Not vuln Not vuln Not vuln "source"
Oracle Access Manager Not vuln "source Support note 2827611.1"
Oracle Data Integrator (ODI) >= 12.2.1.3.210119, Marketplace - >= 2.1.0 Not vuln Workaround "Patch Available, Support Note 2827793.1" "source Support note 2827611.1 Support Note 2827793.1"
Oracle Database Not vuln "source Support note 2827611.1"
Oracle eBusiness Suite Not vuln Workaround "MOS note 2827804.1" "source Support note 2827611.1"
Oracle Enterprise Manager Not vuln "source Support note 209768.1 Support note 2827611.1"
Oracle Enterprise Repository Not vuln Workaround "Mitigation, Support Note 2827793.1" "source Support note 2827611.1 Support Note 2827793.1"
Oracle Forms Not vuln "source Support note 2827611.1"
Oracle Fusion Middleware 12.2.1.3.0 to 12.2.1.4.0 Not vuln Fix "source Support note 209768.1 Support note 2827611.1 MOS note 2827793.1"
Oracle Golden Gate Not vuln "source Support note 2827611.1"
Oracle HTTP Server Not vuln "source Support note 209768.1 Support note 2827611.1"
Oracle Internet Directory Not vuln "source Support note 209768.1 Support note 2827611.1"
Oracle JDeveloper Not vuln Workaround "Mitigation Available, Support Note 2827793.1" "source Support note 2827611.1 Support Note 2827793.1"
Oracle NoSQL Database Not vuln "source Support note 2827611.1"
Oracle Policy Automation (OPA) Not vuln Fix "source Support note 2827611.1"
Oracle SOA Suite Not vuln "source Support note 2827611.1"
Oracle SQL Developer 21.4.1 Not vuln Fix source
Oracle VM VirtualBox Not vuln "source Support note 2827611.1"
Oracle WebCenter Portal 12.2.1.3 & 12.2.1.4 Not vuln Workaround "MOS note 2827977.1 using Elasticsearch which uses Log4j 2.X jars" "source Support note 2827611.1"
Oracle WebCenter Sites Not vuln Workaround "Mitigation Available, Support Note 2827793.1" "source Support note 2827611.1 Support Note 2827793.1"
Oracle WebLogic Server 12.2.1.3.0 to 14.1.1.0.0 Not vuln Fix "source Support note 209768.1 Support note 2827611.1 MOS Note 2827793.1"
Orgavision All Orgavision Link
Osirium All Not vuln Not vuln Not vuln Not vuln source
OTRS All Not vuln source
OVHCloud Hosted Private Cloud powered by VMware Vulnerable Deploying the workarounds provided by VMWare source
OVHCloud Logs Data Platform Not vuln Fix source
OVHCloud ML serving Not vuln Fix source
OVHCloud OVHcloud Internal Systems Not vuln Investigation source
OWASP ZAP < 2.11.1 Not vuln Fix source
Owncloud All Products Not vuln source
OxygenXML Author Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Developer Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Editor Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Oxygen Content Fusion 2.0, 3.0, 4.1 Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Oxygen Feedback Enterprise 1.4.4 & older Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Oxygen License Server v22.1 to v24.0 Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Oxygen PDF Chemistry v22.1, 23.0, 23.1, 24.0 Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Oxygen SDK Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Plugins (see advisory link) Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Publishing Engine Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML Web Author Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"
OxygenXML WebHelp Vulnerable "https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html"