Hi,
We have found log4j jar-files with version 2.13 on our Diagnostic Servers.
They are running Spotlight 13.3, but it looks like the latest Spotlight version (13.5) was release before log4j was patched to 2.15.
When do we have a Spotlight version where log4j is patched to mitigate log4shell?
Sincerely
Niels Grove-Rasmussen
Senior Database Administrator