# How do I Mitigate LOG4J CVE on Elasticsearch 7.4.0?

**URL:** https://discuss.elastic.co/t/how-do-i-mitigate-log4j-cve-on-elasticsearch-7-4-0/320632
**Category:** Elasticsearch
**Created:** [December 7, 2022, 1:19am UTC](https://discuss.elastic.co/t/how-do-i-mitigate-log4j-cve-on-elasticsearch-7-4-0/320632 "2022-12-07T01:19:09Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [December 7, 2022, 1:36am UTC](https://discuss.elastic.co/t/how-do-i-mitigate-log4j-cve-on-elasticsearch-7-4-0/320632/3 "2022-12-07T01:36:16Z")

</div>

Please Refer to the Official Thread on this.

> [@Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476):
>
> Subject: Apache Log4j2 Vulnerability - CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832 - ESA-2021-31 ​​Note - We will update this announcement with new details as they emerge from our analysis. Please check back periodically. Update Log Dec 16, 2021 - 04:20 UTC - Update Summary: ECK 1.9 released which automatically adds the JVM option to impacted Elasticsearch clusters managed by ECK. Dec 17, 2021 - 23:50 UTC - Update latest release of APM Java Agent to 1.28.2. Statement of pl…

---

_[View the full topic](https://discuss.elastic.co/t/how-do-i-mitigate-log4j-cve-on-elasticsearch-7-4-0/320632)._