Over 30% of Log4J apps use a vulnerable version of the library

Roughly 38% of applications using the Apache Log4j library are using a version vulnerable to security issues, including Log4Shell, a critical vulnerability identified as CVE-2021-44228 that carries the maximum severity rating, despite patches being available for more than two years. [...]

apache apache log4j applications apps critical critical vulnerability cve cve-2021-44228 library log4j log4shell patches rating security security issues severity version vulnerability vulnerable