SAP Knowledge Base Article - Public

3131450 - Apache Log4j 2 vulnerability impact on SAP SuccessFactors

Symptom

  • Is SuccessFactors impacted by the Apache Log4j 2 vulnerability (CVE-2021-44228)?
  • Has any mitigation been applied in SuccessFactors for the vulnerability?

Environment

SAP SuccessFactors HXM Suite

Resolution

The vulnerability protection patch has been applied to the impacted servers.

Please refer to the following document for the most up to date status on SAP Products, including SuccessFactors- https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/trust-center/sap-tc-01-5025.pdf
The same will continue to be updated regularly.

Note: Queries on this topic are not being handled through Support tickets. Further updates will continue to be published via the SAP Trust Center link above

Keywords

CVE-2021-44228,log4j,SuccessFactors,apache , KBA , LOD-SF-PLT-SEC , Security Reports , Problem

Product

SAP SuccessFactors HCM Suite all versions