Remove the Log4j 1.2.15

Remove the log4j 1.2.15 brought by Sigar library + update ESAPI to support slf4J instead of log4j

Issue-ID: SDC-3310
Signed-off-by: sebdet <sebastien.determe@intl.att.com>
Change-Id: I63cee67d113f51dbe82a64c69629c62b47918103
Signed-off-by: sebdet <sebastien.determe@intl.att.com>
diff --git a/catalog-fe/pom.xml b/catalog-fe/pom.xml
index 5ac590e..b9a7535 100644
--- a/catalog-fe/pom.xml
+++ b/catalog-fe/pom.xml
@@ -241,6 +241,11 @@
 
         <!-- Inserted for ECOMP Portal Integration -->
         <dependency>
+            <groupId>org.owasp.esapi</groupId>
+            <artifactId>esapi</artifactId>
+            <version>2.2.0.0</version>
+        </dependency>
+        <dependency>
             <groupId>org.onap.portal.sdk</groupId>
             <artifactId>epsdk-fw</artifactId>
             <version>${ecomp.version}</version>
@@ -254,6 +259,10 @@
                     <artifactId>slf4j-log4j12</artifactId>
                     <groupId>org.slf4j</groupId>
                 </exclusion>
+                <exclusion>
+                    <artifactId>log4j</artifactId>
+                    <groupId>log4j</groupId>
+                </exclusion>
             </exclusions>
         </dependency>
         <!-- System metrics -->
@@ -262,6 +271,12 @@
             <artifactId>sigar</artifactId>
             <version>${sigar.version}</version>
             <scope>compile</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>log4j</groupId>
+                    <artifactId>log4j</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
 
     <!-- TEST -->