3148999 - Log4J vulnerability patch for SAP LoadRunner and SAP LoadRunner Performance Center by Micro Focus

Symptom

The critical vulnerability known as Log4Shell (CVE-2021-44228) has been discovered in the logging library, Apache Log4j. Apache Log4j in versions before 2.17 are susceptible to a vulnerability that can allow remote code execution. This vulnerability has been given the maximum criticality score of 10.0 on the Common Vulnerability Scoring System.

Environment

SAP LoadRunner Performance Center by Micro Focus versions 12.60, 2020 and 2021

SAP LoadRunner by Micro Focus versions 12.60, 2020 and 2021

Product

SAP LoadRunner 12.60 by Micro Focus ; SAP LoadRunner 2020 by Micro Focus ; SAP LoadRunner 2020 by Micro Focus, performance center edition ; SAP LoadRunner 2021 by Micro Focus ; SAP LoadRunner 2021 by Micro Focus, performance center edition ; SAP LoadRunner by Micro Focus, performance center edition 12.60

Keywords

Log4J, Micro Focus, Apache, LoadRunner, LRE, LRP, Loadrunner Enterprise, Loadrunner Professional , KBA , XX-PART-MFS-LOR , SAP LoadRunner by Micro Focus , XX-PART-MFS-LPR , SAP LoadRunner by Micro Focus, performance center edition , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.