CISA Log4j (CVE-2021-44228) Vulnerability Guidance

This repository provides CISA's guidance and an overview of related software regarding the Log4j vulnerability (CVE-2021-44228). CISA encourages users and administrators to review the official Apache release and upgrade to Log4j 2.15.0 or apply the recommended mitigations immediately.

Official CISA Guidance & Resources

CISA Current Activity Alerts

National Vulnerability Database (NVD) Information: CVE-2021-44228

Mitigation Guidance

CISA urges organizations operating products marked as "Fixed" to immediately implement listed patches/mitigations here.

CISA urges organizations operating products marked as "Not Fixed" to immediately implement alternate controls, including:

Install a WAF with rules that automatically update.
Set log4j2.formatMsgNoLookups to true by adding -Dlog4j2.formatMsgNoLookups=True to the Java Virtual Machine command for starting your application.
Ensure that any alerts from a vulnerable device are immediately actioned.
Report incidents promptly to CISA and/or the FBI here.

Status Descriptions

Status	Description
Unknown	Status unknown. Default choice.
Affected	Reported to be affected by CVE-2021-44228.
Not Affected	Reported to NOT be affected by CVE-2021-44228 and no further action necessary.
Fixed	Patch and/or mitigations available (see provided links).
Under Investigation	Vendor investigating status.

Software List

This list was initially populated using information from the following sources:

Kevin Beaumont

Vendor	Product	Version(s)	Status	Update available	Vendor link	Notes	Other References	Last Updated
3M Health Information Systems	CGS		Affected	Unknown	CGS: Log4j Software Update(login required)	This advisory is available to customers only and has not been reviewed by CISA.		12/15/2021
Accellion	Kiteworks	v7.6 release	Fixed	Yes	Kiteworks Statement	"As a precaution, Kiteworks released a 7.6.1 Hotfix software update to address the vulnerability. This patch release adds the mitigation for CVE-2021-44228 contained in the Solr package as recommended by Apache Solr group. Specifically, it updates the Log4j library to a non-vulnerable version on CentOS 7 systems as well as adds the recommended option “$SOLR_OPTS -Dlog4j2.formatMsgNoLookups=true” to disable the possible attack vector on both CentOS 6 and CentOS 7."		12/16/2021
Akamai	SIEM Splunk Connector	All	Affected		GitHub - akamai/siem-splunk-connector: Akamai SIEM Connector for Splunk
Amazon	OpenSearch	Unknown	Affected	Yes (R20211203-P2)	Apache Log4j2 Security Bulletin (CVE-2021-44228) (amazon.com)
Amazon	AWS Lambda	Unknown	Affected	Yes	Apache Log4j2 Security Bulletin (CVE-2021-44228) (amazon.com)
Amazon	AWS CloudHSM	< 3.4.1.	Affected		Apache Log4j2 Security Bulletin (CVE-2021-44228) (amazon.com)
Amazon	EC2	Amazon Linux 1 & 2	Unknown		Apache Log4j2 Security Bulletin (CVE-2021-44228) (amazon.com)
Apache	Druid	< druid 0.22.0	Affected	Yes	Release druid-0.22.1 · apache/druid · GitHub			12/12/2021
Apache	Flink	< flink 1.15.0, 1.14.1, 1.13.3	Affected	No	Apache Flink: Advise on Apache Log4j Zero Day (CVE-2021-44228)			12/12/2021
Apache	Log4j	< 2.15.0	Affected	Yes	Log4j – Apache Log4j Security Vulnerabilities
Apache	Kafka	Unknown	Affected	No	Log4j – Apache Log4j Security Vulnerabilities	Only vulnerable in certain configuration(s)
Apache	SOLR	7.4.0 to 7.7.3, 8.0.0 to 8.11.0	Affected	Yes	Log4j – Apache Log4j Security Vulnerabilities
Apereo	CAS	6.3.x & 6.4.x	Affected	Yes	CAS Log4J Vulnerability Disclosure – Apereo Community Blog
Apereo	Opencast	< 9.10, < 10.6	Affected	Yes	Apache Log4j Remote Code Execution · Advisory · opencast/opencast · GitHub
Application Performance Ltd	DBMarlin	Not Affected		Common Vulnerabilities Apache log4j Vulnerability CVE-2021-4428			12/15/2021
Aptible	Aptible	ElasticSearch 5.x	Affected	Yes	Aptible Status - Log4j security incident CVE-2021-27135
Atlassian	Jira Server & Data Center	All	Affected	Yes	FAQ for CVE-2021-44228 Atlassian Support Atlassian Documentation	You can check if you are vulnerable by inspecting the Log4j configuration file. If you find a line containing the org.apache.log4j.net.JMSAppender,
Atlassian	Confluence Server & Data Center	All	Affected	Yes	FAQ for CVE-2021-44228 Atlassian Support Atlassian Documentation	You can check if you are vulnerable by inspecting the Log4j configuration file. If you find a line containing the org.apache.log4j.net.JMSAppender,
Atlassian	Bamboo Server & Data Center	All	Affected	Yes	FAQ for CVE-2021-44228 Atlassian Support Atlassian Documentation	So far, we do not believe our on-premises products are vulnerable to exploitation in their default configuration. However, if a you have modified the default logging configuration (log4j.properties) to enable the JMS Appender functionality, remote code execution may be possible
Atlassian	Crowd Server & Data Center	All	Affected	Yes	FAQ for CVE-2021-44228 Atlassian Support Atlassian Documentation	So far, we do not believe our on-premises products are vulnerable to exploitation in their default configuration. However, if a you have modified the default logging configuration (log4j.properties) to enable the JMS Appender functionality, remote code execution may be possible
Atlassian	Fisheye	All	Affected	Yes	FAQ for CVE-2021-44228 Atlassian Support Atlassian Documentation	So far, we do not believe our on-premises products are vulnerable to exploitation in their default configuration. However, if a you have modified the default logging configuration (log4j.properties) to enable the JMS Appender functionality, remote code execution may be possible
Atlassian	Crucible	All	Affected	Yes	FAQ for CVE-2021-44228 Atlassian Support Atlassian Documentation
Avaya	Avaya Analytics	3.5, 3.6, 3.6.1, 3.7, 4	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Device Services	8, 8.1, 8.1.4, 8.1.5	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura for OneCloud Private		Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security	Avaya is scanning and monitoring its OneCloud Private environments as part of its management activities. Avaya will continue to monitor this fluid situation and remediations will be made as patches become available, in accordance with appropriate change processes.		Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Application Enablement Services	8.1.3.2, 8.1.3.3, 10.1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security		PSN020551u	Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Contact Center	7.0.2, 7.0.3, 7.1, 7.1.1, 7.1.2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Device Services	8.0.1, 8.0.2, 8.1.3	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Media Server	8.0.0, 8.0.1, 8.0.2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security		PSN020549u	Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Presence Services	10.1, 7.1.2, 8, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Session Manager	10.1, 7.1.3, 8, 8.0.1, 8.1, 8.1.1, 8.1.2, 8.1.3	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security		PSN020550u	Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® System Manager	10.1, 8.1.3	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security		PSN005565u	Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Aura® Web Gateway	3.11[P], 3.8.1[P], 3.8[P], 3.9.1 [P], 3.9[P]	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Breeze™	3.7, 3.8, 3.8.1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Contact Center Select	7.0.2, 7.0.3, 7.1, 7.1.1, 7.1.2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya CRM Connector - Connected Desktop	2.2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Meetings	9.1.10, 9.1.11, 9.1.12	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya OneCloud-Private	2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Session Border Controller for Enterprise	8.0.1, 8.1, 8.1.1, 8.1.2, 8.1.3	Affected	Yes	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security		PSN020554u	Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Social Media Hub		Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Workforce Engagement	5.3	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Business Rules Engine	3.4, 3.5, 3.6, 3.7	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Callback Assist	5, 5.0.1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Control Manager	9.0.2, 9.0.2.1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Device Enrollment Service	3.1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Equinox™ Conferencing	9.1.2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Interaction Center	7.3.9	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	IP Office™ Platform	11.0.4, 11.1, 11.1.1, 11.1.2	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Proactive Outreach Manager	3.1.2, 3.1.3, 4, 4.0.1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya Device Enablement Service	3.1.22	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Avaya	Avaya one cloud private -UCaaS - Mid Market Aura	1	Affected	No	Apache Log4J Vulnerability - Impact for Avaya products Avaya Product Security			Tuesday, December 14, 2021 - 8:30pm ET
Appeon	PowerBuilder	Appeon PowerBuilder 2017-2021 regardless of product edition	Affected	No				12/15/2021
BMC	BMC Helix ITSM		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Discovery		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Remedyforce		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Digital Workplace		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Business Workflows		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Client Management		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix CMDB		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Knowledge Management		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Operations Management with AIOps		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Platform		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Remediate		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Virtual Agent		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	Remedy ITSM (IT Service Management)		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	Footprints		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	Track-It!		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	SmartIT		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Control-M		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	Control-M		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	Cloud Lifecycle Management		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	TrueSight Automation for Networks		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	TrueSight Automation for Servers		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	TrueSight Orchestration		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	Bladelogic Database Automation		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC AMI Ops		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Automation Console		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Cloud Cost		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Cloud Security		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Continuous Optimization		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix platform		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Helix Remediate		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	TrueSight Capacity Optimization		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	TrueSight Infrastructure Management		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	TrueSight Operations Management		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC AMI Products		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	MainView Middleware Administrator		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	MainView Middleware Monitor		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
BMC	BMC Compuware		Under Investigation		BMC Security Advisory for CVE-2021-44228 Log4Shell Vulnerability - Blogs & Documents - BMC Community
Broadcom	CA Advanced Authentication	9.1	Affected
Broadcom	CA Risk Authentication		Affected
Broadcom	CA Strong Authentication		Affected
Broadcom	Symantec Endpoint Protection Manager (SEPM)	14.3	Affected	No	Broadcom Support Portal
Broadcom	CloudSOC Cloud Access Security Broker (CASB)		Not Affected		Broadcom Support Portal
Broadcom	Symantec Control Compliance Suite (CCS)		Not Affected		Broadcom Support Portal
Broadcom	Data Center Security (DCS)		Not Affected		Broadcom Support Portal
Broadcom	Data Loss Prevention (DLP)		Not Affected		Broadcom Support Portal
Broadcom	Ghost Solution Suite (GSS)		Not Affected		Broadcom Support Portal
Broadcom	IT Management Suite		Not Affected		Broadcom Support Portal
Broadcom	Layer7 API Gateway		Not Affected		Broadcom Support Portal
Broadcom	Layer7 Mobile API Gateway		Not Affected		Broadcom Support Portal
Broadcom	ProxySG		Not Affected		Broadcom Support Portal
Broadcom	Security Analytics (SA)		Not Affected		Broadcom Support Portal
Broadcom	Symantec Directory		Not Affected		Broadcom Support Portal
Broadcom	Symantec Identity Governance and Administration (IGA)		Not Affected		Broadcom Support Portal
Broadcom	Symantec PGP Solutions		Not Affected		Broadcom Support Portal
Broadcom	VIP		Not Affected		Broadcom Support Portal
Broadcom	Advanced Secure Gateway (ASG)		Under Investigation		Broadcom Support Portal
Broadcom	BCAAA		Under Investigation		Broadcom Support Portal
Broadcom	Content Analysis (CA)		Under Investigation		Broadcom Support Portal
Broadcom	Cloud Workload Protection (CWP)		Under Investigation		Broadcom Support Portal
Broadcom	Cloud Workload Protection for Storage (CWP:S)		Under Investigation		Broadcom Support Portal
Broadcom	Critical System Protection (CSP)		Under Investigation		Broadcom Support Portal
Broadcom	Email Security Service (ESS)		Under Investigation		Broadcom Support Portal
Broadcom	HSM Agent		Under Investigation		Broadcom Support Portal
Broadcom	Industrial Control System Protection (ICSP)		Under Investigation		Broadcom Support Portal
Broadcom	Integrated Cyber Defense Manager (ICDm)		Under Investigation		Broadcom Support Portal
Broadcom	Integrated Secure Gateway (ISG)		Under Investigation		Broadcom Support Portal
Broadcom	Layer7 API Developer Portal		Under Investigation		Broadcom Support Portal
Broadcom	Management Center (MC)		Under Investigation		Broadcom Support Portal
Broadcom	PacketShaper (PS) S-Series		Under Investigation		Broadcom Support Portal
Broadcom	PolicyCenter (PC) S-Series		Under Investigation		Broadcom Support Portal
Broadcom	Privileged Access Manager		Under Investigation		Broadcom Support Portal
Broadcom	Privileged Access Manager Server Control		Under Investigation		Broadcom Support Portal
Broadcom	Privileged Identity Manager		Under Investigation		Broadcom Support Portal
Broadcom	Reporter		Under Investigation		Broadcom Support Portal
Broadcom	Secure Access Cloud (SAC)		Under Investigation		Broadcom Support Portal
Broadcom	SiteMinder (CA Single Sign-On)		Under Investigation		Broadcom Support Portal
Broadcom	SSL Visibility (SSLV)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Endpoint Detection and Response (EDR)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Endpoint Encryption (SEE)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Endpoint Protection (SEP)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Endpoint Protection (SEP) for Mobile		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Mail Security for Microsoft Exchange (SMSMSE)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Messaging Gateway (SMG)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Protection Engine (SPE)		Under Investigation		Broadcom Support Portal
Broadcom	Symantec Protection for SharePoint Servers (SPSS)		Under Investigation		Broadcom Support Portal
Broadcom	VIP Authentication Hub		Under Investigation		Broadcom Support Portal
Broadcom	Web Isolation (WI)		Under Investigation		Broadcom Support Portal
Broadcom	Web Security Service (WSS)		Under Investigation		Broadcom Support Portal
Broadcom	WebPulse		Under Investigation		Broadcom Support Portal
Chaser Systems	discrimiNAT Firewall	All	Not Affected		Are Chaser’s products affected
Check Point	Quantum Security Gateway		Not Affected
Check Point	Quantum Security Management		Not Affected			Uses the 1.8.0_u241 version of the JRE that protects against this attack by default.
Check Point	CloudGuard		Not Affected
Check Point	Infinity Portal		Not Affected
Check Point	Harmony Endpoint & Harmony Mobile		Not Affected
Check Point	SMB		Not Affected
Check Point	ThreatCloud		Not Affected
Cisco	Cisco Webex Meetings Server		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Advanced Web Security Reporting Application		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco CloudCenter Suite Admin		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Crosswork Change Automation		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Evolved Programmable Network Manager		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Integrated Management Controller (IMC) Supervisor		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Intersight Virtual Appliance		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Network Services Orchestrator (NSO)		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco WAN Automation Engine (WAE)		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco UCS Director		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Computer Telephony Integration Object Server (CTIOS)		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Packaged Contact Center Enterprise		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Contact Center Enterprise - Live Data server		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Contact Center Enterprise		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Intelligent Contact Management Enterprise		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified SIP Proxy Software		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Video Surveillance Operations Manager		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Kinetic for Cities		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Umbrella		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Communications Manager Cloud		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Webex Cloud-Connected UC (CCUC)		Affected	No	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Duo		Not Affected	Yes	Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco SocialMiner		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco AnyConnect Secure Mobility Client		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Webex Teams		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Extensible Network Controller (XNC)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus Data Broker		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus Insights		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Wide Area Application Services (WAAS)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco AMP Virtual Private Cloud Appliance		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Adaptive Security Appliance (ASA) Software		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Firepower Management Center		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Firepower Threat Defense (FTD)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Identity Services Engine (ISE)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Registered Envelope Service		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Web Security Appliance (WSA)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco ACI Multi-Site Orchestrator		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Application Policy Infrastructure Controller (APIC)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco CloudCenter Workload Manager		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Connected Grid Device Manager		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Connected Mobile Experiences		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco DNA Assurance		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Data Center Network Manager (DCNM)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Elastic Services Controller (ESC)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco IoT Field Network Director (formerly Cisco Connected Grid Network Management System)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco IoT Operations Dashboard		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Modeling Labs		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Network Planner		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus Dashboard (formerly Cisco Application Services Engine)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Optical Network Planner		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Policy Suite		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Central for Service Providers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Collaboration Manager		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Collaboration Provisioning		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Infrastructure		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime License Manager		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Network		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Optical for Service Providers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Provisioning		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Prime Service Catalog		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco UCS Performance Manager		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Virtual Topology System - Virtual Topology Controller (VTC) VM		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco ACI Virtual Edge		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco ASR 5000 Series Routers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Catalyst 9800 Series Wireless Controllers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco DNA Center		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Enterprise NFV Infrastructure Software (NFVIS)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco GGSN Gateway GPRS Support Node		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco IOS and IOS XE Software		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco IOx Fog Director		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco IP Services Gateway (IPSG)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco MDS 9000 Series Multilayer Switches		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco MME Mobility Management Entity		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Network Assurance Engine		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Network Convergence System 2000 Series		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus 5500 Platform Switches		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus 5600 Platform Switches		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus 6000 Series Switches		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus 7000 Series Switches		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco PDSN/HA Packet Data Serving Node and Home Agent		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cis co Products: December 2021
Cisco	Cisco PGW Packet Data Network Gateway		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco SD-WAN vEdge 1000 Series Routers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco SD-WAN vEdge 2000 Series Routers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco SD-WAN vEdge 5000 Series Routers		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco SD-WAN vEdge Cloud Router Platform		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco SD-WAN vManage		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Secure Network Analytics (SNA), formerly Stealthwatch		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco System Architecture Evolution Gateway (SAEGW)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco HyperFlex System		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco BroadWorks		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Broadcloud Calling		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Contact Center Domain Manager (CCDM)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Contact Center Management Portal (CCMP)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Emergency Responder		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Enterprise Chat and Email		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Finesse		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Paging Server (InformaCast)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Paging Server		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Attendant Console Advanced		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Attendant Console Business Edition		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Attendant Console Department Edition		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Attendant Console Enterprise Edition		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Attendant Console Premium Edition		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Unified Contact Center Express		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Virtualized Voice Browser		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Exony Virtualized Interaction Manager (VIM)		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Meeting Server		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco TelePresence Management Suite		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Vision Dynamic Signage Director		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco CX Cloud Agent Software		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Cognitive Intelligence		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Common Services Platform Collector		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Connectivity		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco DNA Spaces		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Defense Orchestrator		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Intersight		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Cisco Network Assessment (CNA) Tool		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	Managed Services Accelerator (MSX) Network Access Control Service		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	AppDynamics		Under Investigation		Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021
Cisco	duo network gateway (on-prem/self-hosted)		Under Investigation
Citrix	Citrix ADC		Under Investigation		https://support.citrix.com/article/CTX335705
Citrix	Citrix Endpoint Management		Under Investigation		https://support.citrix.com/article/CTX335705
Citrix	Citrix Gateway		Under Investigation		https://support.citrix.com/article/CTX335705
Citrix	Citrix SD-WAN		Under Investigation		https://support.citrix.com/article/CTX335705
Citrix	Citrix Virtual Apps and Desktops		Under Investigation		https://support.citrix.com/article/CTX335705
Cloudera	CDH, HDP, and HDF	Only version 6.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Enterprise	Only version 6.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Science Workbench (CDSW)	Only versions 2.x, 3.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Hortonworks Data Platform (HDP)	Only versions 7.1.x, 2.7.x, 2.6.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Ambari	Only versions 2.x, 1.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Cybersecurity Platform	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Data Steward Studio (DSS)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Arcadia Enterprise	Only version 7.1.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	CDP Private Cloud Base	Only version 7.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Manager (Including Backup Disaster Recovery (BDR) and Replication Manager)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Warehouse (CDW)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Machine Learning (CML)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Engineering (CDE)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Management Console	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Workload XM	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Flow Management (CFM)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Edge Management (CEM)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Stream Processing (CSP)	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	CDS 3 Powered by Apache Spark	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	CDS 3.2 for GPUs	All versions	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Runtime (including Cloudera Data Hub and all Data Hub templates)	Only versions 7.0.x, 7.1.x, 7.2.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Manager (Including Backup Disaster Recovery (BDR) and Replication Manager)	Only versions 7.0.x, 7.1.x, 7.2.x	Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Warehouse (CDW)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Machine Learning (CML)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Engineering (CDE)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Flow (CFM)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Streaming Analytics (CSA)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Data Visualization (CDV)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera DataFlow (CDF)		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Replication Manager		Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Manager (Including Backup Disaster Recovery (BDR))		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	AM2CM Tool		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Hortonworks Data Flow (HDF)		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Hortonworks DataPlane Platform		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Data Lifecycle Manager (DLM)		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Cloudera Streaming Analytics (CSA)		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Management Console for CDP Public Cloud		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	CDP Operational Database (COD)		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Data Catalog		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Workload Manager		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Workload XM (SaaS)		Not Affected		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	SmartSense		Under Investigation		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudera	Data Analytics Studio (DAS)		Under Investigation		https://my.cloudera.com/knowledge/TSB-2021-545-Critical-vulnerability-in-log4j2-CVE-2021-44228?id=332019
Cloudogu	Ecosystem	All	Affected	Yes	Cloudogu Community
Cloudogu	SCM-Manager		Not Affected		SCM-Manager Blog
CyberArk	Privileged Threat Analytics (PTA)	N/A	Affected	Yes	CyberArk Customer Force		This advisory is available to customers only and has not been reviewed by CISA.	12/14/2021
Datadog	Datadog Agent	>=6.17.0, <=6.32.1, >=7.17, <=7.23.1	Fixed	Yes	Datadog Log4j Vulnerability Update
Devolutions	All products		Not Affected		https://blog.devolutions.net/2021/12/critical-vulnerability-in-log4j/
DrayTek	Vigor Routers, Access Points, Switches, VigorACS Central Management Software, MyVigor Platform		Not Affected		DrayTek Statement			12/15/2021
Dynatrace	Managed cluster nodes		Affected
Dynatrace	Synthetic Activegates		Affected
Elastic	Elasticsearch	5,6,8	Affected	Yes	Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31			12/15/2021
Elastic	Elastic Cloud		Under Investigation		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Elastic Cloud Enterprise		Under Investigation		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	APM Java Agent		Under Investigation		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Elastic Cloud Enterprise		Under Investigation		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Elastic Cloud on Kubernetes		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Logstash	<6.8.21,<7.16.1	Affected	Yes	Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Swiftype		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	APM Server		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Beats		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Cmd		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Elastic Agent		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Elastic Endgame		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Elastic Maps Service		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Endpoint Security		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Enterprise Search		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Fleet Server		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Kibana		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
Elastic	Machine Learning		Not Affected		Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31	12/15/2021
ExtraHop	Reveal(x)	<=8.4.6, <=8.5.3, <=8.6.4	Affected	Yes	ExtraHop Statement	Contains vulnerable code but not likely to get unauthenticated user input to the log4j component.		12/14/2021
FedEx	Ship Manager Software	Unknown	Affected/Under Investigation		FedEx Statement	Note: FedEx is aware of the issue related to the Log4j Remote Code Execution vulnerability affecting various Apache products. We are actively assessing the situation and taking necessary action as appropriate. As a result, we are temporarily unable to provide a link to download the FedEx Ship Manager software or generate product keys needed for registration of FedEx Ship Manager software. We are working to have this resolved as quickly as possible and apologize for the inconvenience. For related questions or the most updated information, customers should check FedEx Updates for Apache Log4j Issue or contact their Customer Technology representative.		12/15/2021
F-Secure	Endpoint Proxy	13-15	Affected	Yes	F-Secure services Status - 0-day exploit found in the Java logging package log4j2
F-Secure	Policy Manager	13-15	Affected	Yes	F-Secure services Status - 0-day exploit found in the Java logging package log4j2
F-Secure	Policy Manager Proxy	13-15	Affected	Yes	F-Secure services Status - 0-day exploit found in the Java logging package log4j2
F-Secure	Elements Connector		Affected	Yes	The Log4J Vulnerability (CVE-2021-44228) – which F-Secure products are affected, what it means, what steps should you take - F-Secure Community
F-Secure	Messaging Security Gateway		Affected	Yes	The Log4J Vulnerability (CVE-2021-44228) – which F-Secure products are affected, what it means, what steps should you take - F-Secure Community
Fiix	Fiix CMMS Core	v5	Fixed		PN1579 - Log4Shell Vulnerability Notice	The product has been updated to Log4j version 2.15. An additional patch is being developed to update to 2.16. No user interaction is required.		12/15/2021
Forcepoint	DLP Manager		Affected		Login (forcepoint.com)
Forcepoint	Security Manager (Web, Email and DLP)		Affected		Login (forcepoint.com)
Forcepoint	Forcepoint Cloud Security Gateway (CSG)		Not Affected		Login (forcepoint.com)
Forcepoint	Next Generation Firewall (NGFW)		Not Affected		Login (forcepoint.com)
Forcepoint	Next Generation Firewall, NGFW VPN Client, Forcepoint User ID service and Sidewinder		Not Affected		Login (forcepoint.com)
Forcepoint	One Endpoint		Not Affected		Login (forcepoint.com)
ForgeRock	Autonomous Identity		Affected		Security Advisories - Knowledge - BackStage (forgerock.com)	all other ForgeRock products Not vulnerable
Fortinet	FortiAIOps		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiCASB		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiConvertor		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiEDR Cloud		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiNAC		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiNAC		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiPolicy		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiPortal		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiSIEM		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiSOAR		Affected		PSIRT Advisories FortiGuard
Fortinet	ShieldX		Affected		PSIRT Advisories FortiGuard
Fortinet	FortiAnalyzer Cloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiAnalyzer		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiAP		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiAuthenticator		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiDeceptor		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiEDR Agent		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiGate Cloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiGSLB Cloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiMail		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiManager Cloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiManager		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiOS (includes FortiGate & FortiWiFi)		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiPhish Cloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiRecorder		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiSwicth Cloud in FortiLANCloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiSwitch & FortiSwitchManager		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiToken Cloud		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiVoice		Not Affected		PSIRT Advisories FortiGuard
Fortinet	FortiWeb Cloud		Not Affected		PSIRT Advisories FortiGuard
FusionAuth	FusionAuth	1.32	Not Affected		log4j CVE: How it affects FusionAuth (TLDR: It doesn't) - FusionAuth
Graylog	Graylog Server	All versions >= 1.2.0 and <= 4.2.2	Affected	Yes	Graylog Update for Log4j
IBM	BigFix Compliance		Affected	No
IBM	BigFix Inventory	VM Manager Tool & SAP Tool	Affected	No		To verify if your instance is affected, go to the lib subdirectory of the tool (BESClient/LMT/SAPTOOL and BESClient/LMT/VMMAN) and check what version of log4j is included. Version is included in the name of the library.
IBM	Server Automation		Affected	No
IBM	Management Extender for VMware vCenter		Affected	No
IBM	Resilient		Under Investigation
Gradle	Gradle		Not Affected	No	Gradle Blog - Dealing with the critical Log4j vulnerability	Gradle Scala Compiler Plugin depends upon log4j-core but it is not used.
Gradle	Gradle Enterprise	< 2021.3.6	Affected	Yes	Gradle Enterprise Security Advisories - Remote code execution vulnerability due to use of Log4j2
Gradle	Gradle Enterprise Test Distribution Agent	< 1.6.2	Affected	Yes	Gradle Enterprise Security Advisories - Remote code execution vulnerability due to use of Log4j2
Gradle	Gradle Enterprise Build Cache Node	< 10.1	Affected	Yes	Gradle Enterprise Security Advisories - Remote code execution vulnerability due to use of Log4j2
HPE	3PAR StoreServ Arrays		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	AirWave Management Platform		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Alletra 6000		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Alletra 9k		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba Central		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba ClearPass Policy Manager		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba ClearPass Policy Manager		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba Instant (IAP)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba Location Services		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba NetEdit		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba PVOS Switches		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba SDN VAN Controller		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba User Experience Insight (UXI)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Aruba VIA Client		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	ArubaOS SD-WAN Controllers and Gateways		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	ArubaOS Wi-Fi Controllers and Gateways		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	ArubaOS-CX switches		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	ArubaOS-S switches		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	BladeSystem Onboard Administrator		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Brocade 16Gb Fibre Channel SAN Switch for HPE Synergy		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Brocade 16Gb SAN Switch for HPE BladeSystem c-Class		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Brocade 32Gb Fibre Channel SAN Switch for HPE Synergy		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Brocade Network Advisor		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	CloudAuth		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	CloudPhysics		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Compute Cloud Console		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Compute operations manager- FW UPDATE SERVICE		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	COS (Cray Operating System)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Cray Systems Management (CSM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Custom SPP Portal Link		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Data Services Cloud Console		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Harmony Data Platform		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HOP public services (grafana, vault, rancher, Jenkins)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN2600B SAN Extension Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN4000B SAN Extension Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN6000B Fibre Channel Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN6500B Fibre Channel Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN6600B Fibre Channel Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN6650B Fibre Channel Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE B-series SN6700B Fibre Channel Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Customer Experience Assurance (CEA)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Hardware Support Manager plug-in for VMware vSphere Lifecycle Manager		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Home Location Register (HLR/I-HLR)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Infosight for Servers		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Integrated Home Subscriber Server (I-HSS)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Intelligent Messaging (IM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Intelligent Network Server (INS)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Multimedia Services Environment (MSE)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE OC Convergent Communications Platform (OCCP)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE OC Media Platform Media Resource Function (OCMP-MRF)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE OC Universal Signaling Platform (OC-USP-M)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE OneView		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE OneView for VMware vRealize Operations (vROps)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE OneView Global Dashboard		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Performance Cluster Manager (HPCM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Performance Manager (PM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE OC Service Access Controller (OC SAC)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE OC Service Controller (OCSC)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Position Determination Entity (PDE)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Secure Identity Broker (SIB)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Service Activator (SA)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Service Governance Framework (SGF)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Service Orchestration Manager (SOM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Service Provisioner (SP)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Short Message Point-to-Point Gateway (SMPP)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Slingshot		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Smart Interaction Server (SIS)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE SN3000B Fibre Channel Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE SN8000B 4-Slot SAN Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE SN8000B 8-Slot SAN Backbone Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE SN8600B 4-Slot SAN Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE SN8600B 8-Slot SAN Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE SN8700B 4-Slot Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE SN8700B 8-Slot Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Subscriber, Network, and Application Policy (SNAP)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Subscription Manager (SM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Synergy Image Streamer		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Systems Insight Manager (SIM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Telecom Application Server (TAS)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Unified Correlation and Automation (UCA)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Unified OSS Console (UOC)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Universal SLA Manager (uSLAM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Unified Mediation Bus (UMB)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Unified Topology Manager (UTM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Universal Identity Repository (VIR)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Virtual Connect		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Virtual Connect Enterprise Manager (VCEM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Virtual Provisioning Gateway (vPGW)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Virtual Server Environment (VSE)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	HPE Virtual Subscriber Data Management (vSDM)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE WebRTC Gateway Controller (WGW)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-14
HPE	HPE Wi-Fi Authentication Gateway (WauG)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Insight Cluster Management Utility (CMU)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrated Lights-Out (iLO) Amplifier Pack		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrated Lights-Out 4 (iLO 4)	4	Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrated Lights-Out 5 (iLO 5)	5	Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrity BL860c, BL870c, BL890c		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrity Rx2800/Rx2900		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrity Superdome 2		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Integrity Superdome X		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Intelligent Provisioning		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	iSUT integrated smart update tool		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Maven Artifacts (Atlas)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	MSA		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	NetEdit		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Nimble Storage		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	NS-T0634-OSM CONSOLE TOOLS		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	NS-T0977-SCHEMA VALIDATOR		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	OfficeConnect		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Primera Storage		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	RepoServer part of OPA (on Premises aggregator)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Resource Aggregator for Open Distributed Infrastructure Management		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	RESTful Interface Tool (iLOREST)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SAT (System Admin Toolkit)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Scripting Tools for Windows PowerShell (HPEiLOCmdlets)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SGI MC990 X Server		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SGI UV 2000 Server		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SGI UV 300, 300H, 300RL, 30EX		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SGI UV 3000 Server		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SN8700B 8-Slot Director Switch		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	StoreEasy		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	StoreEver CVTL		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	StoreEver LTO Tape Drives		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	StoreEver MSL Tape Libraries		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	StoreOnce		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	SUM (Smart Update Manager)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Superdome Flex 280		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	Superdome Flex Server		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
HPE	UAN (User Access Node)		Not Affected		(Revision) Apache Software Log4j - Security Vulnerability CVE-2021-44228	Support Communication Cross Reference ID: SIK7387		2021-12-12
IBM	Cognos Controller	10.4.2	Affected	Yes	Security Bulletin: IBM Cognos Controller 10.4.2 IF15: Apache log4j Vulnerability (CVE-2021-44228)			12/15/2021
IBM	Planning Analytics Workspace	>2.0.57	Affected	Yes	Security Bulletin: IBM Planning Analytics 2.0: Apache log4j Vulnerability (CVE-2021-44228)			12/15/2021
IBM	Power HMC	V9.2.950.0 & V10.1.1010.0	Affected	Yes	Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44228) affects Power HMC			12/15/2021
IBM	App ID		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Certificate Manager		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cloud Object Storage		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cloud Object Storage		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cloudant		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Container Registry		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Container Security Services		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Continuous Delivery		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Hyper Protect DBaaS for MongoDB		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Hyper Protect DBaaS for PostgreSQL		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Hyper Protect Virtual Server		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Internet Services		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Knowledge Studio		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Managed VMware Service		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Natural Language Understanding		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	VMware Solutions		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	VMware vCenter Server		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	VMware vSphere		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	vRealize Operations and Log Insight		Affected	Yes	An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Analytics Engine		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	App Configuration		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	App Connect		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Application Gateway		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Aspera		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Aspera Endpoint		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Aspera Enterprise		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Aspera fasp.io		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Bare Metal Servers		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Block Storage		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Block Storage for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Block Storage Snapshots for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Case Manager		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Client VPN for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cloud Activity Tracker		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cloud Backup		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cloud Monitoring		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Code Engine		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cognos Command Center		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Cognos Integration Server		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose Enterprise		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for Elasticsearch		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for etcd		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for MongoDB		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for MySQL		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for PostgreSQL		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for RabbitMQ		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for Redis		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for RethinkDB		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Compose for ScyllaDB		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Content Delivery Network		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Copy Services Manager		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for DataStax		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for EDB		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for Elasticsearch		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for etcd		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for MongoDB		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for PostgreSQL		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Databases for Redis		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Datapower Gateway		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Dedicated Host for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Direct Link Connect		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Direct Link Connect on Classic		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Direct Link Dedicated (2.0)		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Direct Link Dedicated Hosting on Classic		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Direct Link Dedicated on Classic		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Direct Link Exchange on Classic		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	DNS Services		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Emptoris Contract Management		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Emptoris Program Management		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Emptoris Sourcing		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Emptoris Spend Analysis		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Emptoris Supplier Lifecycle Management		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Enterprise Tape Controller Model C07 (3592) (ETC)		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Event Notifications		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Event Streams		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	File Storage		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Flash System 900 (& 840)		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Flow Logs for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Functions		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	GSKit		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Guardium S-TAP for Data Sets on z/OS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Guardium S-TAP for DB2 on z/OS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Guardium S-TAP for IMS on z/OS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Hyper Protect Crypto Services		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	i2 Analyst’s Notebook		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	i2 Base		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Application Runtime Expert for i		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Backup, Recovery and Media Services for i		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Db2 Mirror for i		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM HTTP Server		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM i Portfolio of products under the Group SWMA		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM i Access Family		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM PowerHA System Mirror for i		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Direct Browser User Interface		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Direct for HP NonStop		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Direct for i5/OS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Direct for OpenVMS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Express for Microsoft Windows		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Express for UNIX		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Sterling Connect:Express for z/OS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	IBM Instana Agent	Lower than 12-11-2021	Affected	Yes	Instana Status Incidents			12/14/2021
IBM	Key Lifecyle Manager for z/OS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Key Protect		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Kubernetes Service		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Load Balancer for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Log Analysis		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Mass Data Migration		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Maximo EAM SaaS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Message Hub		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	MQ Appliance		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	MQ on IBM Cloud		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	OmniFind Text Search Server for DB2 for i		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	OPENBMC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	PowerSC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	PowerVM Hypervisor		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	PowerVM VIOS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	QRadar Advisor		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Qradar Network Threat Analytics		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	QRadar SIEM		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Quantum Services		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Rational Developer for AIX and Linux		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Rational Developer for i		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Red Hat OpenShift on IBM Cloud		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Robotic Process Automation		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	SAN Volume Controller and Storwize Family		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Satellite Infrastructure Service		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Schematics		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Secrets Manager		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Secure Gateway		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Archive Library Edition		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Discover		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Client Management Service		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for Databases: Data Protection for Oracle		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for Databases: Data Protection for SQL		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for Enterprise Resource Planning		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for Mail: Data Protection for Domino		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for Mail: Data Protection for Exchange		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for Workstations		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect for z/OS USS Client and API		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Plus Db2 Agent		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Plus Exchange Agent		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Plus File Systems Agent		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Plus MongoDB Agent		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Plus O365 Agent		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Server		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Snapshot for UNIX		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Spectrum Protect Snapshot for UNIX		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	SQL Query		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Gentran		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Order Management		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for ACORD		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for Financial Services		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for FIX		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for NACHA		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for PeopleSoft		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for SAP R/3		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for SEPA		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for Siebel		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Pack for SWIFT		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Packs for EDI		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Packs for Healthcare		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Sterling Transformation Extender Trading Manager		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Storage TS1160		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Storage TS2280		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Storage TS2900 Library		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Storage TS3100-TS3200 Library		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Storage TS4500 Library		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Storage Virtualization Engine TS7700		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Tape System Library Manager		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	TDMF for zOS		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Total Storage Service Console (TSSC) / TS4500 IMC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Transit Gateway		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Tririga Anywhere		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	TS4300		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Urbancode Deploy		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Virtual Private Cloud		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Virtual Server for Classic		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Virtualization Management Interface		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	VPN for VPC		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
IBM	Workload Automation		Not Affected		An update on the Apache Log4j CVE-2021-44228 vulnerability - IBM PSIRT Blog			12/15/2021
Intland	codebeamer	<= 20.11-SP11, <= 21.09-SP3	Affected	Some releases	[https://codebeamer.com/cb/wiki/19872365](Apache Log4j vulnerability and fixes)	A fix has been released for https://codebeamer.com/cb/wiki/13134438 and https://codebeamer.com/cb/wiki/19418497, but not yet for https://codebeamer.com/cb/wiki/16937839
ISEC7	Sphere	N/A	Not Affected	No				12/15/2021
Jenkins	CI/CD Core		Not Affected
Jenkins	Plugins		Unkown			Need to audit plugins for use of log4j
Jetbrains			Affected	Yes	https://www.jetbrains.com/help/license_server/release_notes.html
MathWorks	All MathWorks general release desktop or server products		Not Affected	No	MathWorks statement regarding CVE-2021-44228
Lenovo	DSS-G		Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Administrator (LXCA)		Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Energy Manager (LXEM)		Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Integrator (LXCI) for VMware vCenter		Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	NetApp ONTAP Tools for VMware vSphere		Affected		Apache Log4j Vulnerability	See NetApp advisory.		2021-12-14
Lenovo	ThinkAgile HX		Affected		Apache Log4j Vulnerability	Nutanix and VMware components only; hardware not affected. See Nutanix and VMWare advisories.		2021-12-14
Lenovo	ThinkAgile VX		Affected		Apache Log4j Vulnerability	VMware components only; hardware not affected. See VMWare advisory.		2021-12-14
Lenovo	XClarity Integrator (LXCI) for ServiceNow		Under Investigation		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Integrator (LXCI) for Nagios		Under Investigation		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Integrator (LXCI) for Microsoft Azure Log Analytics		Under Investigation		Apache Log4j Vulnerability			2021-12-14
Lenovo	Storage Management utilities		Under Investigation		Apache Log4j Vulnerability			2021-12-14
Lenovo	BIOS/UEFI		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Chassis Management Module 2 (CMM)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Commercial Vantage		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Confluent		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Embedded System Management Java-based KVM clients		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Fan Power Controller (FPC)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Fan Power Controller2 (FPC2)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Integrated Management Module II (IMM2)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	System Update		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Thin Installer		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Update Retriever		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Vantage		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Orchestrator (LXCO)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Mobile (LXCM)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Integrator (LXCI) for Windows Admin Center		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Integrator (LXCI) for Microsoft System Center		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Controller (XCC)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Essentials (LXCE)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	XClarity Provisioning Manager (LXPM)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	Network Switches running: Lenovo CNOS, Lenovo ENOS, IBM ENOS, or Brocade FOS		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	System Management Module (SMM)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	System Management Module 2 (SMM2)		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	ThinkSystem 2x1x16 Digital KVM Switch - Type 1754D1T		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	ThinkSystem DE Series Storage		Not Affected		Apache Log4j Vulnerability	See also NetApp advisory.		2021-12-14
Lenovo	ThinkSystem DM Series Storage		Not Affected		Apache Log4j Vulnerability	See also NetApp advisory.		2021-12-14
Lenovo	ThinkSystem DS Series Storage		Not Affected		Apache Log4j Vulnerability			2021-12-14
Lenovo	ThinkSystem Manager (TSM)		Not Affected		Apache Log4j Vulnerability			2021-12-14
McAfee	ePolicy Orchestrator Agent Handlers (ePO-AH)		Not Affected
McAfee	Data Exchange Layer (DXL)		Under Investigation
McAfee	Enterprise Security Manager (ESM)		Under Investigation
McAfee	ePolicy Orchestrator Application Server (ePO)		Under Investigation
McAfee	McAfee Active Response (MAR)		Under Investigation
McAfee	Network Security Manager (NSM)		Under Investigation
McAfee	Network Security Platform (NSP)		Under Investigation
McAfee	Threat Intelligence Exchange (TIE)		Under Investigation
Microsoft	Azure Data lake store java	< 2.3.10	Affected		azure-data-lake-store-java/CHANGES.md at ed5d6304783286c3cfff0a1dee457a922e23ad48 · Azure/azure-data-lake-store-java · GitHub
Microsoft	Azure Data lake store java	< 2.3.10	Affected		azure-data-lake-store-java/CHANGES.md at ed5d6304783286c3cfff0a1dee457a922e23ad48 · Azure/azure-data-lake-store-java · GitHub
Microsoft	Azure DevOps		Not Affected		Azure DevOps (and Azure DevOps Server) and the log4j vulnerability
Microsoft	Azure DevOps Server	2019.0 - 2020.1	Affected	No	Azure DevOps (and Azure DevOps Server) and the log4j vulnerability
Microsoft	Team Foundation Server	2018.2+	Affected	No	Azure DevOps (and Azure DevOps Server) and the log4j vulnerability
MongoDB	MongoDB Atlas Search		Affected	yes	https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
MongoDB	All other components of MongoDB Atlas (including Atlas Database, Data Lake, Charts)		Not Affected		https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
MongoDB	MongoDB Enterprise Advanced (including Enterprise Server, Ops Manager, Enterprise Kubernetes Operators)		Not Affected		https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
MongoDB	MongoDB Community Edition (including Community Server, Cloud Manager, Community Kubernetes Operators)		Not Affected		https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
MongoDB	MongoDB Drivers		Not Affected		https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
MongoDB	MongoDB Tools (including Compass, Database Shell, VS Code Plugin, Atlas CLI, Database Connectors)		Not Affected		https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
MongoDB	MongoDB Realm (including Realm Database, Sync, Functions, APIs)		Not Affected		https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
Netapp	Multiple NetApp products		Affected		https://security.netapp.com/advisory/ntap-20211210-0007/
Neo4j	Neo4j Graph Database	Version >4.2, <4..2.12	Affected	No				12/13/2021
New Relic	New Relic Java Agent	<7.4.2	Affected	Yes	Java agent v7.4.2	Initially fixed in 7.4.1, but additional vulnerability found	New Relic tracking, covers CVE-2021-44228, CVE-2021-45046	12/15/2021
Okta	Okta RADIUS Server Agent	< 2.17.0	Affected		Okta RADIUS Server Agent CVE-2021-44228 Okta			12/12/2021
Okta	Okta On-Prem MFA Agent	< 1.4.6	Affected		Okta On-Prem MFA Agent CVE-2021-44228 Okta			12/12/2021
Okta	Advanced Server Access		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta Access Gateway		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta AD Agent		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta Browser Plugin		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta IWA Web Agent		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta LDAP Agent		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta Mobile		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta Workflows		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Okta	Okta Verify		Not Affected		Okta’s response to CVE-2021-44228 (“Log4Shell”) Okta Security			12/12/2021
Palo-Alto	Prisma Cloud Compute		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	Prisma Cloud		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	PAN-OS		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	GlobalProtect App		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	Cortex XSOAR		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	Cortex XDR Agent		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	CloudGenix		Not Affected		CVE-2021-44228 Informational: Impact of Log4j Vulnerability CVE-2021-44228 (paloaltonetworks.com)
Palo-Alto	Panorama	9.0, 9.1, 10.0	Affected	Yes	Unit42 Palo-Alto Apache Log4j Vulnerability		Upgrade Panorama to PAN-OS 10.1 to remediate this issue. This advisory will be updated when hot fixes for the affected Panorama versions are available	12/15/2021
Ping Identity	PingFederate	8.0 <= version <= 10.3.4	Affected	Yes	Log4j2 vulnerability CVE-2021-44228			2021-12-15
Ping Identity	PingFederate OAuth Playground	< 4.3.1	Affected	Yes	Log4j2 vulnerability CVE-2021-44228			2021-12-15
Ping Identity	PingFederate Java Integration Kit	< 2.7.2	Affected	Yes	Log4j2 vulnerability CVE-2021-44228			2021-12-15
Ping Identity	PingAccess	4.0 <= version <= 6.3.2	Affected	Yes	Log4j2 vulnerability CVE-2021-44228			2021-12-15
Ping Identity	PingCentral		Affected	Yes	Log4j2 vulnerability CVE-2021-44228			2021-12-15
Ping Identity	PingIntelligence		Affected	Yes	Log4j2 vulnerability CVE-2021-44228			2021-12-15
Plex	Plex Industrial IoT		Fixed		PN1579 - Log4Shell Vulnerability Notice	The product has been updated to Log4j version 2.15. An additional patch is being developed to update to 2.16. No user interaction is required.		12/15/2021
Pulse Secure	Pulse Secure Virtual Traffic Manager		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse Secure Services Director		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse Secure Web Application Firewall		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse Connect Secure		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Ivanti Connect Secure (ICS)		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse Policy Secure		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse Desktop Client		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse Mobile Client		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse One		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Pulse ZTA		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Ivanti Neurons for ZTA		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Pulse Secure	Ivanti Neurons for secure Access		Not Affected		Pulse Secure Article: KB44933 - CVE-2021-44228 - Java logging library (log4j)
Rapid7	AlcidekArt, kAdvisor, and kAudit	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	AppSpider Pro	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	AppSpider Enterprise	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	Insight Agent	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightAppSec Scan Engine	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightAppSec Scan Engine	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightCloudSec/DivvyCloud	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightConnect Orchestrator	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightIDR/InsightOps Collector & Event Sources	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightIDR Network Sensor	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightOps DataHub	InsightOps DataHub <= 2.0	Affected	Yes	Rapid7 Statement	Upgrade DataHub to version 2.0.1 using the following instructions.		12/15/2021
Rapid7	InsightOps non-Java logging libraries	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightOps r7insight_java logging library	<=3.0.8	Affected	Yes	Rapid7 Statement	Upgrade r7insight_java to 3.0.9		12/15/2021
Rapid7	InsightVM Kubernetes Monitor	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightVM/Nexpose	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	InsightVM/Nexpose Console	on-prem	Not Affected		Rapid7 Statement	Installations of the InsightVM/Nexpose have “log4j-over-slf4j-1.7.7.jar” packaged in them. This is a different library than log4j-core and is not vulnerable to Log4Shell.		12/15/2021
Rapid7	InsightVM/Nexpose Engine	on-prem	Not Affected		Rapid7 Statement	Installations of the InsightVM/Nexpose have “log4j-over-slf4j-1.7.7.jar” packaged in them. This is a different library than log4j-core and is not vulnerable to Log4Shell.		12/15/2021
Rapid7	IntSights virtual appliance	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	Logentries DataHub	Linux version <= 1.2.0.820; Windows version <= 1.2.0.820	Affected	Yes	Rapid7 Statement	Linux: Install DataHub_1.2.0.822.deb using the following instructions. Windows: Run version 1.2.0.822 in a Docker container or as a Java command per these instructions. You can find more details here.		12/15/2021
Rapid7	Logentries le_java logging library	All versions: this is a deprecated component	Affected	Yes	Rapid7 Statement	Migrate to version 3.0.9 of r7insight_java		12/15/2021
Rapid7	Metasploit Pro	on-prem	Not Affected		Rapid7 Statement	Metasploit Pro ships with log4j but has specific configurations applied to it that mitigate Log4Shell. A future update will contain a fully patched version of log4j.		12/15/2021
Rapid7	Metasploit Framework	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	tCell Java Agent	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Rapid7	Velociraptor	on-prem	Not Affected		Rapid7 Statement			12/15/2021
Red Hat build of Quarkus	log4j-core low		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat CodeReady Studio 12	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat Data Grid 8	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat Descision Manager 7	log4j-core low		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat Enterprise Linux 6	log4j		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Red Hat Enterprise Linux 7	log4j		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Red Hat Enterprise Linux 8	parfait:0.5/log4j12		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Red Hat Integration Camel K	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat Integration Camel Quarkus	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat JBoss A-MQ Streaming	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat JBoss Enterprise Application Platform 7	log4j-core low		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat JBoss Enterprise Application Platform Expansion Pack	log4j-core low		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat JBoss Fuse 7	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenShift Application Runtimes	log4j-core		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenShift Container Platform 3.11	openshift3/ose-logging-elasticsearch5		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenShift Container Platform 4	openshift4/ose-metering-presto		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenShift Container Platform 4	openshift4/ose-metering-hive		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenShift Container Platform 4	openshift4/ose-logging-elasticsearch6		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenShift Logging	logging-elasticsearch6-container		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat OpenStack Platform 13 (Queens)	opendaylight		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat Process Automation 7	log4j-core low		Affected	No	CVE-2021-44228- Red Hat Customer Portal
Red Hat Single Sign-On 7	log4j-core		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Red Hat Software Collections	rh-maven36-log4j12		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Red Hat Software Collections	rh-maven35-log4j12		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Red Hat Software Collections	rh-java-common-log4j		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Redhat	log4j-core		Not Affected		CVE-2021-44228- Red Hat Customer Portal
Rockwell Automation	Warehouse Management	4.01.00, 4.02.00, 4.02.01, 4.02.02	Affected	Under development	PN1579 - Log4Shell Vulnerability Notice			12/15/2021
Rockwell Automation	MES EIG	3.03.00	Affected	No, product discontinued	PN1579 - Log4Shell Vulnerability Notice	Customers should upgrade to EIG Hub if possible or work with their local representatives about alternative solutions.		12/15/2021
Rockwell Automation	Industrial Data Center	Gen 1, Gen 2, Gen 3, Gen 3.5	Fixed	Follow the mitigation instructions outlined by VMware in VMSA-2021-0028	PN1579 - Log4Shell Vulnerability Notice			12/15/2021
Rockwell Automation	VersaVirtual	Series A	Fixed	Follow the mitigation instructions outlined by VMware in VMSA-2021-0028	PN1579 - Log4Shell Vulnerability Notice			12/15/2021
Rockwell Automation	FactoryTalk Analytics DataFlowML	4.00.00	Affected	Under development	PN1579 - Log4Shell Vulnerability Notice			12/15/2021
Rockwell Automation	FactoryTalk Analytics DataView	3.03.00	Affected	Under development	PN1579 - Log4Shell Vulnerability Notice			12/15/2021
RSA	SecurID Authentication Manager		Not Affected
RSA	SecurID Authentication Manager Prime		Not Affected
RSA	SecurID Authentication Manager WebTier		Not Affected
RSA	SecurID Identity Router		Not Affected
RSA	SecurID Governance and Lifecycle		Not Affected
RSA	SecurID Governance and Lifecycle Cloud		Not Affected
Ruckus	Virtual SmartZone (vSZ)	5.1 to 6.0	Affected		Ruckus Wireless (support.ruckuswireless.com)			12/13/2021
Salesforce	Sales Cloud		Affected		Salesforce Statement	"Sales Cloud is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Service Cloud		Affected		Salesforce Statement	"Service Cloud is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Community Cloud		Affected		Salesforce Statement	"Community Cloud is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	B2C Commerce Cloud		Affected		Salesforce Statement	"B2C Commerce Cloud is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Analytics Cloud		Affected		Salesforce Statement	"Analytics Cloud is reported to be affected by CVE-2021-44228. Services have been updated to mitigate the issues identified in CVE-2021-44228 and we are executing our final validation steps."		12/15/2021
Salesforce	Force.com		Affected		Salesforce Statement	"Force.com is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Social Studio		Affected		Salesforce Statement	"Social Studio is reported to be affected by CVE-2021-44228. The service has a mitigation in place and is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Datorama		Affected		Salesforce Statement	"Datorama is reported to be affected by CVE-2021-44228. The service has a mitigation in place and is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Pardot		Affected		Salesforce Statement	"Pardot is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Data.com		Affected		Salesforce Statement	"Data.com is reported to be affected by CVE-2021-44228. The service has a mitigation in place and is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Heroku		Not Affected		Salesforce Statement	"Heroku is reported to not be affected by CVE-2021-44228; no further action is necessary at this time."		12/15/2021
Salesforce	Marketing Cloud		Affected		Salesforce Statement	"Marketing Cloud is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	MuleSoft (Cloud)		Affected		Salesforce Statement	"MuleSoft (Cloud) is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	MuleSoft (On-Premise)		Unknown		Salesforce Statement	"Please contact Customer Support."		12/15/2021
Salesforce	ClickSoftware (As-a-Service)		Affected		Salesforce Statement	"ClickSoftware (As-a-Service) is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	ClickSoftware (On-Premise)		Unknown		Salesforce Statement	"Please contact Customer Support."		12/15/2021
Salesforce	Tableau (Online)		Affected		Salesforce Statement	"Tableau (Online) is reported to be affected by CVE-2021-44228. The service is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Tableau (On-Premise)		Unknown		Salesforce Statement	"Please contact Customer Support."		12/15/2021
Salesforce	Slack		Affected		Salesforce Statement	"Slack is reported to be affected by CVE-2021-44228. The service has a mitigation in place and is being updated to remediate the vulnerability identified in CVE-2021-44228."		12/15/2021
Salesforce	Evergage (Interaction Studio)		Affected		Salesforce Statement	"Evergage (Interaction Studio) is reported to be affected by CVE-2021-44228. Services have been updated to mitigate the issues identified in CVE-2021-44228 and we are executing our final validation steps."		12/15/2021
Siemens	Capital	All Versions >- 2019.1 SP1912	Affected	Yes	Siemens Advisory Link	Only affected if Teamcenter integration feature is used. Mitigation: Mitigation Link		12/15/2021
Siemens	Comos Desktop App	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Desigo CC Advanced Reporting	V4.0, 4.1, 4.2, 5.0, 5.1	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Desigo CC Info Center	V5.0, 5.1	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	E-Car OC Cloud Application	All Versions < 2021-12-13	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	EnergyIP Prepay	V3.7. V3.8	Affected	Yes	Siemens Advisory Link			12/15 2021
Siemens	GMA-Manager	All Version > V8.6.2j-398	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	HES UDIS	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Industrial Edge Management App	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Industrial Edge Management OS	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Industrial Edge Management Hub	All versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	LOGO! Soft Comfort	All versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Mendix Applications	All Versions	Not Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Mindsphere Cloud Application	All Versions < 2021-12-11	Affected	Yes	Siemens Advisory Link	Fixed on Cloud Version		12/15/2021
Siemens	NX	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Opcenter Intelligence	All Versions >=3.2	Affected	Yes	Siemens Advisory Link	Only OEM version that ships Tableau		12/15/2021
Siemens	Operation Scheduler	All versions >= V1.1.3	Affected	Yes	Siemens Advisory Link	Block incoming and outgoing connections		12/15/2021
Siemens	SIGUARD DSA	V4.2, 4.3, 4.4	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	SIMATIC WinCC	All Versions <V7.4 SP1	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	SiPass integrated V2.80	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	SiPass integrated V2.85	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Siveillance Command	All Versions >=4.16.2.1	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Siveillance Control Pro	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Siveillance Identity V1.5	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Siveillance Identity V1.6	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Siveillance Vantage	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Solid Edge Wiring Harness Design	All Versions >= 2020	Affected	Yes	Siemens Advisory Link	only if Teamcenter integration feature is used		12/15/2021
Siemens	Spectrum Power 4	All versions	Affected	Yes	Siemens Advisory Link	only with component jROS in version 3.0.0		12/15/2021
Siemens	Spectrum Power 7	All Versions < V2.30 SP2	Affected	Yes	Siemens Advisory Link	only with component jROS		12/15/2021
Siemens	Teamcenter Suite	All Versions	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	VeSys	All Versions >=2019.1 SP1912	Affected	Yes	Siemens Advisory Link	only if Teamcenter integration feature is used		12/15/2021
Siemens	Xpedition EDM Server	VX.2.6-VX.2.10	Affected	Yes	Siemens Advisory Link			12/15/2021
Siemens	Xpedition EDM Client	VX.2.6-VX.2.10	Affected	Yes	Siemens Advisory Link			12/15/2021
SolarWinds	Server & Application Monitor (SAM)	SAM 2020.2.6 and later	Affected	No	Apache Log4j Critical Vulnerability (CVE-2021-44228) Server & Application Monitor (SAM) and the Apache Log4j Vulnerability (CVE-2021-44228)	Workarounds available, hotfix under development		12/14/2021
SolarWinds	Database Performance Analyzer (DPA)	2021.1.x, 2021.3.x, 2022.1.x	Affected	No	Apache Log4j Critical Vulnerability (CVE-2021-44228) Database Performance Analyzer (DPA) and the Apache Log4j Vulnerability (CVE-2021-44228)	Workarounds available, hotfix under development		12/14/2021
SonicWall	Gen5 Firewalls (EOS)		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the appliance.		12/12/2021
SonicWall	Gen6 Firewalls		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the appliance.		12/12/2021
SonicWall	Gen7 Firewalls		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the appliance.		12/12/2021
SonicWall	SonicWall Switch		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the SonicWall Switch.		12/12/2021
SonicWall	SMA 100		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the SMA100 appliance.		12/12/2021
SonicWall	SMA 1000		Not Affected		Security Advisory (sonicwall.com)	Version 12.1.0 and 12.4.1 doesn't use a vulnerable version		12/12/2021
SonicWall	Email Security		Not Affected		[Security Advisory (sonicwall.com)]	Version 10.x doesn't use a vulnerable version		12/12/2021
SonicWall	MSW		Not Affected		Security Advisory (sonicwall.com)	Mysonicwall service doesn't use Log4j		12/12/2021
SonicWall	NSM		Not Affected		Security Advisory (sonicwall.com)	NSM On-Prem and SaaS doesn't use a vulnerable version		12/12/2021
SonicWall	Capture Client & Capture Client Portal		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the Capture Client.		12/12/2021
SonicWall	Access Points		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the SonicWall Access Points		12/12/2021
SonicWall	WNM		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the WNM.		12/12/2021
SonicWall	Capture Security Appliance		Not Affected		Security Advisory (sonicwall.com)	Log4j2 not used in the Capture Security appliance.		12/12/2021
SonicWall	WXA		Not Affected		Security Advisory (sonicwall.com)	WXA doesn't use a vulnerable version		12/12/2021
SonicWall	SonicCore		Not Affected		Security Advisory (sonicwall.com)	SonicCore doesn't use a Log4j2		12/12/2021
SonicWall	Analyzer		Under Investigation		Security Advisory (sonicwall.com)	Under Review		12/12/2021
SonicWall	Analytics		Under Investigation		Security Advisory (sonicwall.com)	Under Review		12/12/2021
SonicWall	GMS		Under Investigation		Security Advisory (sonicwall.com)	Under Review		12/12/2021
SonicWall	CAS		Under Investigation		Security Advisory (sonicwall.com)	Under Review		12/12/2021
SonicWall	WAF		Under Investigation		Security Advisory (sonicwall.com)	Under Review		12/12/2021
Sophos	Sophos Mobile EAS Proxy	< 9.7.2	Affected	No	Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	The Sophos Mobile EAS Proxy, running in Traffic Mode, is affected. Customers will need to download and install version 9.7.2, available from Monday December 13, 2021, on the same machine where it is currently running. PowerShell mode is not affected. Customers can download the Standalone EAS Proxy Installer version 9.7.2 from the Sophos website.		12/12/2021
Sophos	Cloud Optix		Fixed		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Users may have noticed a brief outage around 12:30 GMT as updates were deployed. There was no evidence that the vulnerability was exploited and to our knowledge no customers are impacted.		12/12/2021
Sophos	Sophos Firewall (all versions)		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Sophos Firewall does not use Log4j.		12/12/2021
Sophos	SG UTM (all versions)		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Sophos SG UTM does not use Log4j.		12/12/2021
Sophos	SG UTM Manager (SUM) (all versions)	All versions	Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	SUM does not use Log4j.		12/12/2021
Sophos	Sophos ZTNA		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Sophos ZTNA does not use Log4j.		12/12/2021
Sophos	Sophos Home		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Sophos Home does not use Log4j.		12/12/2021
Sophos	Sophos Central		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Sophos Central does not run an exploitable configuration.		12/12/2021
Sophos	Sophos Mobile		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Sophos Mobile (in Central, SaaS, and on-premises) does not run an exploitable configuration.		12/12/2021
Sophos	Reflexion		Not Affected		Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	Reflexion does not run an exploitable configuration.		12/12/2021
Splunk	Data Stream Processor	DSP 1.0.x, DSP 1.1.x, DSP 1.2.x	Affected	No	Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	IT Service Intelligence (ITSI)	4.11.x, 4.10.x, 4.9.x, 4.8.x, 4.7.x, 4.4.x	Affected	No	Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Enterprise	non-Windows versions of 8.1.x and 8.2.x only if Hadoop and/or DFS are used	Affected	No	Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Enterprise Amazon Machine Image (AMI)	non-Windows versions of 8.1.x and 8.2.x only if Hadoop and/or DFS are used	Affected	No	Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Enterprise Docker Container	non-Windows versions of 8.1.x and 8.2.x only if Hadoop and/or DFS are used	Affected	No	Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Stream Processor Service	non-Windows versions of 8.1.x and 8.2.x only if Hadoop and/or DFS are used	Affected	No	Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Cloud Developer Edition		Under Investigation		Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Connect for SNMP		Under Investigation		Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk DB Connect		Under Investigation		Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Forwarders (UF/HWF)		Under Investigation		Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Splunk	Splunk Mint		Under Investigation		Splunk Security Advisory for Apache Log4j (CVE-2021-44228) Splunk			12/12/2021
Spring	Spring Boot		Unkown		https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot	Spring Boot users are only affected by this vulnerability if they have switched the default logging system to Log4J2
Tech Software	OneAegis (f/k/a IRBManager)	All versions	Not Affected		Log4j CVE-2021-44228 Vulnerability Impact Statement	OneAegis does not use Log4j.		12/15/2021
Tech Software	SMART	All versions	Not Affected		Log4j CVE-2021-44228 Vulnerability Impact Statement	SMART does not use Log4j.		12/15/2021
Tech Software	Study Binders	All versions	Not Affected		Log4j CVE-2021-44228 Vulnerability Impact Statement	Study Binders does not use Log4j.		12/15/2021
TPLink	Omega Controller	Linux/Windows all	Affected	Yes	Statement on Apache Log4j Vulnerability	Update is Beta. Reddit: overwritten vulnerable log4j with 2.15 files as potential workaround. Though that should now be done with 2.16	Tp Community Link, Reddit Link	12/15/2021
TrendMicro	All		Under Investigation		https://success.trendmicro.com/solution/000289940
Ubiquiti	UniFi Network Application	6.5.53 & lower versions	Affected	Yes	UniFi Network Application 6.5.54 Ubiquiti Community
Ubiquiti	UniFi Network Controller	6.5.54 & lower versions	Affected	Yes	UniFi Network Application 6.5.55 Ubiquiti Community		6.5.54 is reported to still be vulnerable. 6.5.55 is the new recommendation for mitigatin log4j vulnerabilities by updating to log4j 2.16.0	12/15/2021
VMware	VMware vCenter Server	8.x, 7.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vCenter Server	7.x, 6.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vCenter Server	6.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Horizon	N/A	Affected	Yes	VMSA-2021-0028			12/14/2021
VMware	VMware HCX	4.x, 3.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware NSX-T Data Centern	3.x, 2.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Unified Access Gateway	21.x, 20.x, 3.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Workspace ONE Access	21.x, 20.10.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Identity Manager	3.3.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vRealize Operations	8.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vRealize Operations Cloud Proxy	Any	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vRealize Log Insight	8.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vRealize Automation	8.x, 7.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vRealize Lifecycle Manager	8.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Telco Cloud Automation	2.x, 1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Carbon Black Cloud Workload Appliance	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Carbon Black EDR Server	7.x, 6.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Site Recovery Manager	8.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu GemFire	9.x, 8.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu Greenplum	6.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu Operations Manager	2.x	Affected	Yes	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu Application Service for VMs	2.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu Kubernetes Grid Integrated Edition	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu Observability by Wavefront Nozzle	3.x, 2.x	Affected	Yes	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	Healthwatch for Tanzu Application Service	2.x, 1.x	Affected	Yes	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	Spring Cloud Services for VMware Tanzu	3.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	Spring Cloud Gateway for VMware Tanzu	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	Spring Cloud Gateway for Kubernetes	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	API Portal for VMware Tanzu	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	Single Sign-On for VMware Tanzu Application Service	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	App Metrics	2.x	Affected	Yes	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vCenter Cloud Gateway	1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Tanzu SQL with MySQL for VMs	2.x, 1.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware vRealize Orchestrator	8.x, 7.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Cloud Foundation	4.x, 3.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Workspace ONE Access Connector (VMware Identity Manager Connector)	21.x, 20.10.x, 19.03.0.1	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Horizon DaaS	9.1.x, 9.0.x	Affected	No	VMSA-2021-0028.1 (vmware.com)			12/12/2021
VMware	VMware Horizon Cloud Connector	1.x, 2.x	Affected	Yes	VMSA-2021-0028.1 (vmware.com)			12/12/2021
Zendesk	All Products	All Versions	Affected	No	2021-12-13 Security Advisory - Apache Log4j (CVE-2021-44228)	Zendesk products are all cloud-based; thus there are no updates for the customers to install as the company is working on patching their infrastructure and systems.		12/13/2021
Zscaler	Multiple Products		Not Affected	No	CVE-2021-44228 log4j Vulnerability			12/15/2012

251 KiB Raw Blame History Unescape Escape