Has anyone reviewed Oracle's stance on the log4j results not being vulnerable? It requires having a support account to review the details.