Ask a Question

TestComplete 11 Log4J vulnerability??

Occasional Visitor

TestComplete 11 Log4J vulnerability??

We use TestComplete 11. Can you please tell me if the Log4J vulnerability is in this version?

SmartBear Alumni (Retired)

Hi @Klosm ,


The Apache Log4j2 Remote Code Execution (RCE) Vulnerabilities - CVE-2021-44228 and CVE-2021-45046 have been mitigated or remediated on SmartBear-managed cloud products. If you are on an on-premise version or a customized version, please reach out to our support team at for further information.


Apache recently announced that the fix to address CVE-2021-44228 (upgrading Log4j to at least version 2.15.0) is not complete if non-default or custom configurations are used. SmartBear products remain unaffected with this new information. SmartBear does not use the non-default configurations and the residual risk is low in using the 2.15.0 version of Log4j.


Many SmartBear products are already using Log4j 2.16.0. Out of an abundance of caution, SmartBear products not already using 2.16 will update to this version during the next available release.

Sonya Mihaljova
Community and Education Specialist

Showing results for 
Search instead for 
Did you mean: