# Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5

**URL:** https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140
**Category:** Elasticsearch
**Created:** [December 16, 2021, 11:13am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140 "2021-12-16T11:13:50Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140/2 "2021-12-19T23:12:53Z")

</div>

Those versions are [EOL](https://www.elastic.co/support/eol) and unsupported, please upgrade as a matter of urgency.

[Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476) has more info.

---

_[View the full topic](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140)._