We are using Elasticsearch v7.5.2 along with OpenJDK 11.0.11 in on-premise servers and I just need to know from Elasticsearch Team support if this version is impacted by Log4j vulnerability (CVE-2021-44228) or not. The reason why I have asked here is that this ES software v7.5.2 comes with log4j-ap…

Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2?

warkolm (Mark Walkom) December 20, 2021, 12:17am 2

Topic		Replies	Views
Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5 Elasticsearch	2	1245	January 16, 2022
Log4j CVE-2021-44832 (released 28th dec) - is ES vulnerable? Elasticsearch	10	6644	February 7, 2022
Addressing log4j vulnerability for 1.x and 2.x elasticsearch Elasticsearch	2	1529	January 18, 2022
Is Elasticsearch affected by CVE-2021-45046 - a second vulnerability in log4j? Elasticsearch	2	5953	January 12, 2022
How do I Mitigate LOG4J CVE on Elasticsearch 7.4.0? Elasticsearch	3	613	January 4, 2023