AcuSensor IAST module needs attention.

Experience Manager 6.5 Forms Designer

AFHCAN Global LLC

AFHCAN Global LLC

Enterprise Application Access (EAA) Connector

Akamai SIEM Integration Connector for Splunk is not vulnerable to CVE-2021-44228. Although it includes the vulnerable Log4J component, it is not used by the connector.

10/19 release distribution does not include Log4j. Vulnerable only if customers applications use affected versions of Apache Log4j.

Packages for Amazon Linux 1 and 2 not affected, package for Amazon Linux 2022 is affected.

Amazon-owned images published under a Verified Account on Amazon ECR Public are not affected by the Log4j issue.

Services have been updated. All Elastic Load Balancers, as well as Classic, Application, Network and Gateway, are not affected by this Log4j issue.

Many customers are estimated to be vulnerable. Vulnerable only if affected EMR releases are used and untrusted sources are configured to be processed.

Applying updates as required, portion of customers may still be vulnerable. Some MSK-specific service components use Log4j > 2.0.0 library and are being patched where needed.

Keyspaces (for Apache Cassandra)

Update in progress, portion of customers may still be vulnerable. AWS Lake Formation service hosts are being updated to the latest version of Log4j.

By default not vulnerable. Opt-in hot-patch to mitigate the Log4j in JVM layer issue is available.

By default not vulnerable, and a new version of Amazon Kinesis Agent which is part of AL2 addresses the Log4j issue. Opt-in hot-patch to mitigate the Log4j issue in JVM layer is available.

Managed Workflows for Apache Airflow (MWAA)

The security vulnerability does NOT affect our applications and products or pose any threat. This applies to all Bachmann applications and products, including atvise solutions.

BMC Helix Cloud Security

BMC Helix Continuous Optimization

BMC Helix Digital Workplace

BMC Helix Knowledge Management

MainView Middleware Administrator

Remedy ITSM (IT Service Management)

TrueSight Automation for Servers

TrueSight Capacity Optimization

Cloud Workload Protection (CWP)

Critical System Protection (CSP)

Management Center (MC)

PolicyCenter (PC) S-Series

Privileged Access Manager

Privileged Access Manager Server Control

Secure Access Cloud (SAC)

CT Medical Imaging Products

Cisco ASR 5000 Series Routers

Cisco CloudCenter Suite Admin

Cisco Identity Services Engine (ISE)

Cisco Network Assurance Engine

Cisco Network Convergence System 2000 Series

Cisco Nexus 5500 Platform Switches

Cisco Nexus 5600 Platform Switches

Cisco Nexus 6000 Series Switches

Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode

Cisco Paging Server (InformaCast)

Cisco PDSN/HA Packet Data Serving Node and Home Agent