Skip to content
This repository was archived by the owner on Jun 16, 2022. It is now read-only.

Files

Latest commit

 Cannot retrieve latest commit at this time.

History

History
136 lines (133 loc) · 20.5 KB

software_list_o.md

File metadata and controls

136 lines (133 loc) · 20.5 KB

List of software (un)affected by the log4shell CVEs

About this list

0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

O

Supplier Product Version (see Status) Status CVE-2021-4104 Status CVE-2021-44228 Status CVE-2021-45046 Status CVE-2021-45105 Notes Links
OpenText All link
Opto 22 GROOV-AR1, GROOV-AR1-BASE, GROOV-AR1-SNAP < 4.3g Fix The Log4j vulnerability affects all products running groov View software link
Opto 22 GROOV-AT1, GROOV-AT1-SNAP < 4.3g Fix The Log4j vulnerability affects all products running groov View software link
Opto 22 GROOV-SVR-WIN, GROOV-SVR-WIN-BASE, GROOV-SVR-WIN-SNAP < 4.3g Fix The Log4j vulnerability affects all products running groov View software link
Opto 22 GRV-EPIC-PR1, GRV-EPIC-PR2 < 3.3.2 Fix The Log4j vulnerability affects all products running groov View software link
Objectif Lune All Objectif Lune Blog Post
Obsidian Dynamics kafdrop All Investigation source
OCLC All All Not vuln Fix source
Octopus All Octopus Advisory
Ogest All All Not vuln Not vuln Not vuln Not vuln source
Okta Access Gateway Not vuln source
Okta AD Agent Not vuln source
Okta Advanced Server Access Not vuln source
Okta Browser Plugin Not vuln source
Okta IWA Web Agent Not vuln source
Okta LDAP Agent Not vuln source
Okta Mobile Not vuln source
Okta On-Prem MFA Agent <1.4.6 Not vuln Fix source fix
Okta Radius Server Agent 2.17.0 Not vuln Fix source/fix
Okta RADIUS Server Agent < 2.17.0 Vulnerable Okta RADIUS Server Agent CVE-2021-44228 Okta
Okta Verify Not vuln source
Okta Workflow Not vuln source
Okta Workflows Not vuln Not vuln Not vuln Not vuln Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security
Olympus Medical Products All Not Vuln source
OneSpan Authentication Appliance Vulnerable Fix availability will be announced soon source
OneSpan Authentication Server Vulnerable Fix availability will be announced soon source
OneSpan Digipass Gateway Vulnerable Fix availability will be announced soon source
OneSpan Mobile Security Suite 4.31.1 Not vuln Fix source
OneSpan Sign Vulnerable Fix availability will be announced soon source
Open Text Content Server 21.3, 21.4 Not vuln Vulnerable source
Open Text Extended ECM for Microsoft Office 365 21.3, 21.4 Not vuln Vulnerable source
Opengear All Opengear Link
openHAB All 3.0.4, 3.1.1 Not vuln Fix source
OpenMRS Talk 2.4.0-2.4.1 Vulnerable Mitigations are available, pending a new release source
OpenMRS TALK All OpenMRS TALK Link
OpenNMS Horizon (including derived Sentinels) < 29.0.3 Not vuln Fix Workarounds are available too for earlier versions source
OpenNMS Meridian (including derived Minions and Sentinels) < 2021.1.8, 2020.1.15, 2019.1.27 Not vuln Fix Workarounds are available too for earlier versions source
OpenNMS Minion appliance Not vuln Fix source
OpenNMS PoweredBy OpenNMS Not vuln Workaround source
Openpath (Motorola) All Not vuln Not vuln Not vuln Not vuln source
OpenSearch All < 1.2.1 Not vuln Fix source
OpenVPN All Not vuln Not vuln Not vuln Not vuln source
Oracle Access Manager Not vuln source Support note 2827611.1
Oracle Data Integrator (ODI) >= 12.2.1.3.210119, Marketplace - >= 2.1.0 Not vuln Workaround Patch Available, Support Note 2827793.1 source Support note 2827611.1 Support Note 2827793.1
Oracle Database Not vuln source Support note 2827611.1
Oracle eBusiness Suite Not vuln Workaround MOS note 2827804.1 source Support note 2827611.1
Oracle Enterprise Manager Not vuln source Support note 209768.1 Support note 2827611.1
Oracle Enterprise Repository Not vuln Workaround Mitigation, Support Note 2827793.1 source Support note 2827611.1 Support Note 2827793.1
Oracle Forms Not vuln source Support note 2827611.1
Oracle Fusion Middleware 12.2.1.3.0 to 12.2.1.4.0 Not vuln Fix source Support note 209768.1 Support note 2827611.1 MOS note 2827793.1
Oracle Golden Gate Not vuln source Support note 2827611.1
Oracle HTTP Server Not vuln source Support note 209768.1 Support note 2827611.1
Oracle Internet Directory Not vuln source Support note 209768.1 Support note 2827611.1
Oracle JDeveloper Not vuln Workaround Mitigation Available, Support Note 2827793.1 source Support note 2827611.1 Support Note 2827793.1
Oracle NoSQL Database Not vuln source Support note 2827611.1
Oracle Policy Automation (OPA) Not vuln Fix source Support note 2827611.1
Oracle SOA Suite Not vuln source Support note 2827611.1
Oracle SQL Developer 21.4.1 Not vuln Fix source
Oracle VM VirtualBox Not vuln source Support note 2827611.1
Oracle WebCenter Portal 12.2.1.3 & 12.2.1.4 Not vuln Workaround MOS note 2827977.1 using Elasticsearch which uses Log4j 2.X jars source Support note 2827611.1
Oracle WebCenter Sites Not vuln Workaround Mitigation Available, Support Note 2827793.1 source Support note 2827611.1 Support Note 2827793.1
Oracle WebLogic Server 12.2.1.3.0 to 14.1.1.0.0 Not vuln Fix source Support note 209768.1 Support note 2827611.1 MOS Note 2827793.1
Orgavision All Orgavision Link
Osirium All Not vuln Not vuln Not vuln Not vuln source
OTRS All Not vuln source
Ovarro AlarmVision Not vuln Not vuln Not vuln source
Ovarro Atrium Not vuln Not vuln Not vuln source
Ovarro BurstDetect Not vuln Not vuln Not vuln source
Ovarro CA Tools Not vuln Not vuln Not vuln source
Ovarro ControlPoint Not vuln Not vuln Not vuln source
Ovarro DSG Not vuln Not vuln Not vuln source
Ovarro EDGE Connect Not vuln Not vuln Not vuln source
Ovarro EDGE Connect+ Not vuln Not vuln Not vuln source
Ovarro Enigma Not vuln Not vuln Not vuln source
Ovarro Enigma3m/Phocus3m/Enigma4G/IOT Not vuln Not vuln Not vuln source
Ovarro EnigmaWeb Not vuln Not vuln Not vuln source
Ovarro Eureka3 Not vuln Not vuln Not vuln source
Ovarro Eureka5 Not vuln Not vuln Not vuln source
Ovarro Flowsure Not vuln Not vuln Not vuln source
Ovarro IOT-Connector Not vuln Not vuln Not vuln source
Ovarro Kingfisher CP12 Not vuln Not vuln Not vuln source
Ovarro Kingfisher CP30 Not vuln Not vuln Not vuln source
Ovarro Kingfisher CP35/MC35 Not vuln Not vuln Not vuln source
Ovarro LeakVision/LeakInsight Not vuln Not vuln Not vuln source
Ovarro LoggerVision Not vuln Not vuln Not vuln source
Ovarro Mikron3 Not vuln Not vuln Not vuln source
Ovarro Mikron5 Not vuln Not vuln Not vuln source
Ovarro Miser Not vuln Not vuln Not vuln source
Ovarro MS-CPU42 Not vuln Not vuln Not vuln source
Ovarro Other software packages (Adroit/DX-Server) Not vuln Not vuln Not vuln source
Ovarro Phocus3 (IR & Radio) Not vuln Not vuln Not vuln source
Ovarro Pioneer Not vuln Not vuln Not vuln source
Ovarro PrimeWeb Not vuln Not vuln Not vuln source
Ovarro S2000 Not vuln Not vuln Not vuln source
Ovarro S2000 Micro Not vuln Not vuln Not vuln source
Ovarro S2000 Micro Mk2 Not vuln Not vuln Not vuln source
Ovarro S2000 Mk2 Not vuln Not vuln Not vuln source
Ovarro S2000 Nano Not vuln Not vuln Not vuln source
Ovarro SCOPE Not vuln Not vuln Not vuln source
Ovarro Stream Not vuln Not vuln Not vuln source
Ovarro TBox LT2/TG2 Not vuln Not vuln Not vuln source
Ovarro TBox MS-CPU32 Not vuln Not vuln Not vuln source
Ovarro TBox MS-CPU32-S2 Not vuln Not vuln Not vuln source
Ovarro TConnect Not vuln Not vuln Not vuln source
Ovarro ToolBox Not vuln Not vuln Not vuln source
Ovarro ToolBoxPlus Not vuln Not vuln Not vuln source
Ovarro TWinSoft Not vuln Not vuln Not vuln source
Ovarro XiLog+ Not vuln Not vuln Not vuln source
Ovarro XiLog4G/IOT Not vuln Not vuln Not vuln source
OVHCloud Hosted Private Cloud powered by VMware Vulnerable Deploying the workarounds provided by VMWare source
OVHCloud Logs Data Platform Not vuln Fix source
OVHCloud ML serving Not vuln Fix source
OVHCloud OVHcloud Internal Systems Not vuln Investigation source
OWASP ZAP < 2.11.1 Not vuln Fix source
Owncloud All Not vuln source
OxygenXML Author Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Developer Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Editor Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Oxygen Content Fusion 2.0, 3.0, 4.1 Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Oxygen Feedback Enterprise 1.4.4 & older Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Oxygen License Server v22.1 to v24.0 Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Oxygen PDF Chemistry v22.1, 23.0, 23.1, 24.0 Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Oxygen SDK Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Plugins (see advisory link) Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Publishing Engine Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML Web Author Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html
OxygenXML WebHelp Vulnerable https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html