I am surprised nobody asked this yet, so putting it here for some easy points.

I'll choose the most complete answer as the correct one next week.


1 Answer 1


Tridion Sites - core product unaffected but customers may still be affected in a custom web application.

Tridion Docs - core product unaffected but on-site customers should check any DITA-OT/customizations using log4j.

This library is used in some of the other RWS products here you can find the full detailed list of products affected and not affected by Critical Apache Log4J2 CVE-2021-44228 Vulnerability (Log4Shell). and the Mitigation Guidance which was created by RWS Support.

  • We used the above link too. It is pretty exhaustive and provides pointers to almost all of the RWS products
    – Shiva
    Dec 16, 2021 at 16:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.