# Logs4j CVE-2021-44228 Vulnerability

**URL:** <https://community.grafana.com/t/logs4j-cve-2021-44228-vulnerability/57606>\
**Category:** Configuration\
**Created:** [December 13, 2021, 11:22am UTC](https://community.grafana.com/t/logs4j-cve-2021-44228-vulnerability/57606 "2021-12-13T11:22:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kavirajan](https://avatars.discourse-cdn.com/v4/letter/k/a183cd/32.png) [@kavirajan](https://community.grafana.com/u/kavirajan)\
**Post date:** [December 13, 2021, 11:22am UTC](https://community.grafana.com/t/logs4j-cve-2021-44228-vulnerability/57606/1 "2021-12-13T11:22:48Z")

</div>

We are using Grafana V7.0.5. Hope you are aware about the critical vulnerability reported on log4j CVE-2021-44228. We would like to understand if there is any impact. If there is any impact please suggest when the fix is going to be available and if any workaround is available.

---

<div class="post-metadata">

**Author:** ![adeverteuil](https://sea2.discourse-cdn.com/grafana/user_avatar/community.grafana.com/adeverteuil/32/6799_2.png) [@adeverteuil](https://community.grafana.com/u/adeverteuil)\
**Post date:** [December 14, 2021, 7:59pm UTC](https://community.grafana.com/t/logs4j-cve-2021-44228-vulnerability/57606/2 "2021-12-14T19:59:32Z")

</div>

Hello,  
Grafana and Grafana Enterprise are not affected by log4j. See our official statement here:

> **[Grafana Labs core products not impacted by Log4j CVE-2021-44228 and related...](https://grafana.com/blog/2021/12/14/grafana-labs-core-products-not-impacted-by-log4j-cve-2021-44228-and-related-vulnerabilities/)**
>
> After a rigorous review of our codebase in response to the Log4j RCE vulnerability, we are confident that Grafana OSS, Grafana Cloud, and Grafana Enterprise are not affected.

---

<div class="post-metadata">

**Author:** ![kavirajan](https://avatars.discourse-cdn.com/v4/letter/k/a183cd/32.png) [@kavirajan](https://community.grafana.com/u/kavirajan)\
**Post date:** [December 15, 2021, 2:37pm UTC](https://community.grafana.com/t/logs4j-cve-2021-44228-vulnerability/57606/3 "2021-12-15T14:37:01Z")

</div>

Thank You for the confirmation.  
In addition to CVE-2021044228, there two more vulnerabilities were reported,

[https://nvd.nist.gov/vuln/detail/CVE-2021-4104](https://nvd.nist.gov/vuln/detail/CVE-2021-4104)  
[https://nvd.nist.gov/vuln/detail/CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046)

We would like to understand if there is any impact on Grafana ?  
If there is any impact please suggest when the fix is going to be available and if any workaround is available.

Looking forward.