Apache log4j vulneraibilty-SQL Server

Hi @Shijin Nath

For the most up to date information on this issue，please refer to the MSRC Advisory and Microsoft Security Threat Intelligence sites.

Overall, Microsoft is aware of the log4j exploit, and actively working with all services to remediate any issues. The SQL Server does not have any known reliance on this vulnerable library.

-------------

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

See this on the same subject:
https://learn.microsoft.com/en-us/answers/questions/664855/sql-server-2017-log4j-found-within-commons-logging.html

Those files are not affected by the problem.