# Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4
**URL:** https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110
**Category:** Elastic Security
**Created:** [December 16, 2021, 8:32am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110 "2021-12-16T08:32:46Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)
#### Post date: [December 16, 2021, 8:32am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110/1 "2021-12-16T08:32:46Z")
Can any one please provide information on Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4. These are very old versions. If any resolution possible without upgrading the stack.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110/2 "2021-12-20T00:06:02Z")
Please don't post the same topic more than once, it makes it much harder for people to help you 🙂
> [@JMSAppender used on Logstash 2.3.4 and Elasticsearch 2.3.4](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127):
>
> Can anyone confirm whether JMSAppender is used in Logstash 2.3.4 and Elasticsearch 2.3.4 ?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110/3 "2021-12-20T00:06:05Z")