Just to clarify - those are the apache commons logging interfaces to log4j. Not log4j itself. SH has posted a new thread on this topic and have confirmed that the product is not susceptible to (CVE-2021-44228) - Log4J Vulnerability (CVE-2021-44228) and SimpleHelp
1 Like