Loading
search-img
Title
INDEX: Log4j vulnerability impact on FlexNet Operations

This article is an extension of the Log4j security advisory and serves to consolidate impact and mitigation details of related Log4j vulnerabilities with regards to FlexNet Publisher.

FlexNet Product Assessment by Component:

FlexNet Operations ALM

ComponentCurrent Log4J VersionFixed Version
ALM (core module)2.17.0

[Resolved]

2022.03: Upgrade to 2.17.2

LFS2.17.1

[Resolved]

2022.02: Upgraded to 2.17.1

CLSN/A

[Resolved]

2022.02: Migrated from Log4J to Logback 1.2.9

UAS1.x

[Resolved]

2022.03: Upgrade to 2.17.2

ESD1.x2022.04: Upgrade to 2.17.2
NS2.16.0

[Resolved]

2022.03: Upgrade to 2.17.2

Reporter SSO*1.x2022.04: Upgrade to 2.17.1
*Reporter SSO is internally used by the FlexNet Operations system, no expected customer impact.

 

FlexNet Operations LLM

ComponentCurrent Log4J VersionFixed Version
LLM (core module)N/AN/A
LFS2.17.1

[Resolved]

2022.02: Upgraded to 2.17.1

CLSN/A

[Resolved]

2022.02: Migrated from Log4J to Logback 1.2.9

UAS1.x

[Resolved]

2022.03: Upgrade to 2.17.2

ESD1.x2022.04: Upgrade to 2.17.2
Reporter SSO*1.x2022.04: Upgrade to 2.17.1
*Reporter SSO is internally used by the FlexNet Operations system, no expected customer impact.

 

FlexNet Operations Product Assessment by CVE:

ProductCVEPotential ExposureFixed VersionMitigation Resources
FlexNet Operations ALMCVE-2021-44228Yes2022.01

Upgraded to Log4j 2.17.0

  • Core module
  • Updates and Insights
 CVE-2021-45046Yes2022.03

To be upgraded to Log4j 2.17.1

  • Core module
  • Updates and Insights
 CVE-2021-45105Yes2022.03

To be upgraded to Log4j 2.17.1

  • Core module
  • Updates and Insights
 CVE-2021-44832Yes2022.01

Upgraded to Log4j 2.17.0

  • Core module
  • Updates and Insights

To be upgraded to Log4j 2.17.1 (2022.03)

 CVE-2021-4104Yes2022.03

To be upgraded to Log4j 2.17.1

  • LFS
  • UAS
  • CLS
 CVE-2019-17571Yes2022.03

To be upgraded to Log4j 2.17.1

  • LFS
  • UAS
  • CLS
FlexNet Operations LLMCVE-2021-44228NoN/AN/A
 CVE-2021-45046NoN/AN/A
 CVE-2021-45105NoN/AN/A
 CVE-2021-44832NoN/AN/A
 CVE-2021-4104Yes2022.03To be upgraded to 2.17.1
 CVE-2019-17571NoN/AN/A
FlexNet Operations On-PremisesCVE-2021-44228Yes2021 R1 HotfixKB Article
 CVE-2021-45046Yes2021 R1 HotfixKB Article
 CVE-2021-45105Yes2021 R1 HotfixKB Article
 CVE-2021-44832YesPending

To be upgraded to Log4j 2.17.1

  • Core module
  • Updates and Insights
 CVE-2021-4104YesPending

To be upgraded to Log4j 2.17.1

  • LFS
  • UAS
  • CLS
 CVE-2019-17571YesPending

To be upgraded to Log4j 2.17.1

  • LFS
  • UAS
  • CLS

 

Was this helpful?
Support Hub
Create a case with Support
0/255
Upload Attachment
File Upload
Maximum file size allowed is 3 MB.
File type not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files (.csv) Speadsheets (.xlsx, .xls)

Are you sure you want to cancel the case creation?

Are you sure you want to close this case

Get Hotline support
Products Region Phone Numbers
FlexNet Operations
FlexNet Embedded
FlexNet Publisher
FlexNet Connect
FlexNet Code Insight
InstallAnywhere
InstallShield 		North America  * +1 630-332-2513 (toll)
+1 877-279-2853 (toll-free in North America)
Europe  * +44 1925 944367 (toll)
+44 800 047 8642 (toll-free in Europe)
Japan  * +81 3-4540-5335 (select option 2)
Australia  * +61 3 9895 2177
+61 1800 560 603 (toll-free in Australia)
Usage Intelligence (formerly Revulytics)
Compliance Intelligence 		Please use the Case Portal to submit your support ticket or reach out to your Revenera contact.
Book an Appointment
File Upload
Maximum file size allowed is 3 MB.
File type not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files (.csv) Speadsheets (.xlsx, .xls)
+1.800.374.4353
CONTACT US REVENERA.COM FLEXERA.com
© 2026 Flexera Software. All Rights Reserved.
Privacy policy Terms and conditions Flexera Community Contact Us
Loading
INDEX: Log4j vulnerability impact on FlexNet Operations