# CVE-2021-44228 Log4j 2 ~ 2.14

**URL:** <https://forum.certara.com/t/cve-2021-44228-log4j-2-2-14/1766>\
**Category:** Troubleshooting and Problems\
**Created:** [December 13, 2021, 9:25pm UTC](https://forum.certara.com/t/cve-2021-44228-log4j-2-2-14/1766 "2021-12-13T21:25:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sergiy](https://sea1.discourse-cdn.com/certara/user_avatar/forum.certara.com/sergiy/32/2553_2.png) [@Sergiy](https://forum.certara.com/u/Sergiy)\
**Post date:** [December 14, 2021, 10:02pm UTC](https://forum.certara.com/t/cve-2021-44228-log4j-2-2-14/1766/1 "2021-12-14T22:02:09Z")

</div>

Hi Rob,

What version of P21 Community do you refer to?

Thank you,  
Sergiy

---

<div class="post-metadata">

**Author:** ![pjohnston](https://avatars.discourse-cdn.com/v4/letter/p/85e7bf/32.png) [@pjohnston](https://forum.certara.com/u/pjohnston)\
**Post date:** [December 15, 2021, 4:02pm UTC](https://forum.certara.com/t/cve-2021-44228-log4j-2-2-14/1766/2 "2021-12-15T16:02:56Z")

</div>

Hi Rob,

P21 Community **3.0.0 and higher** do **not** use log4j, the java package of concern in the recent server-side RCE exploits.

(Also, Pinnacle 21 **Enterprise** does **not** use log4j either. P21 Enterprise clients are welcome to contact their Success/Support agent for details.)

P21 Community **2.2.0 and lower** did **use** log4j. However, we have not distributed that version since May 2019. Also, **End of Life** for P21 Community 2.x and lower occurred on **March 31, 2021**. Support has not been provided after this date. Please [upgrade to 3.1.2 via our Downloads page](https://www.pinnacle21.com/downloads).

If you are somehow using P21 Community 2.2.0 and lower, past their official End of Life date and against P21’s firm recommendation to upgrade, you are **exposing yourself** to a non-zero amount of risk. **Immediate upgrade** to P21 Community 3.1.2, which does not contain the log4j library at all, is strongly advised.

Kind regards,  
PJ

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/certara/user_avatar/forum.certara.com/system/32/17_2.png) [@system](https://forum.certara.com/u/system)\
**Post date:** [December 13, 2021, 9:25pm UTC](https://forum.certara.com/t/cve-2021-44228-log4j-2-2-14/1766/3 "2021-12-13T21:25:10Z")

</div>

Hi - Will you be posting an updated Pinnacle version to address the log4j vulnerability CVE-2021-44228?

Thanks,  
Rob