Forum Discussion

Jazzy's avatar
Jazzy
Occasional Visitor
3 years ago

Does SoapUI 5.6.0 has log4j vulnerability?

I have installed SoapUI 5.6.0 and it does have "log4j-1.2.14.jar" file present at SmartBear\SoapUI-5.6.0\lib location.  Does this file have vulnerability? Log4J file < 2.15 is vulnerable. So, Can yo...
SOAP
techguy24's avatar
techguy24
Occasional Visitor

I see the new update was released. However, it contains 2.16 which is not secure either. Will 2.17 be released soon?

TanyaYatskovska's avatar
TanyaYatskovska
SmartBear Alumni (Retired)
3 years ago

Hi,

SmartBear is closely monitoring and analyzing Apache guidance related to the Log4j2 Remote Code Execution (RCE) Vulnerabilities stemming from CVE-2021-44228 and associated vulnerabilities. Please follow this page for more information:

https://smartbear.com/security/cve-2021-44228/