# Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5
**URL:** https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140
**Category:** Elasticsearch
**Created:** [December 16, 2021, 11:13am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140 "2021-12-16T11:13:50Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)
#### Post date: [December 16, 2021, 11:13am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140/1 "2021-12-16T11:13:50Z")
Can anyone please confirm whether Elasticsearch and Logstash versions **below 5** are also impacted with Log4j vulnerability threat ?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140/2 "2021-12-19T23:12:53Z")
Those versions are [EOL](https://www.elastic.co/support/eol) and unsupported, please upgrade as a matter of urgency.
[Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476) has more info.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 16, 2022, 11:13pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140/3 "2022-01-16T23:13:16Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.