Security Update - Apache Log4j critical vulnerability (CVE-2021-44228)

Modified on Tue, 14 Nov 2023 at 10:54 AM

XPLG Security Update

After an extensive security audit of the entire XPLG environment, we have found that none of the XPLG product suite systems contain the software identified in the vulnerability disclosure. XPLG is using Log4J in several of its services, however none in the versions range exposed to the critical vulnerability (CVE-2021-44228).


Although this vulnerability does not compromise XPLG users, we are always committed to keeping our products' security up to date with the latest secured libraries.


XPLG has released a security update that replaces all Log4J libraries to the latest Log4J version 2.16.0 (confirmed to be secured by Apache).

 

Additional information and detailed update procedure:

https://wiki.xpolog.com/display/XPOL/7.8067+(Log4J)+-+Release+Notes

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select atleast one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article