Apache Log4j vulnerability - December 2021 (updated 12/15/21)

Sage and our partners take the security of our customer solutions seriously, and regularly undertake proactive testing to identify potential vulnerabilities and provide fixes. Following the initial announcement of the Apache Log4j vulnerability on December 10th and subsequent updates, Sage has been investigating the potential impact on our products and services.

Our initial findings indicate there are no exposed systems in the Sage Products or architecture stack that uses log4j. Where we have identified the potential for vulnerability, we’ve issued an initial patch. We’re proactively monitoring the situation and applying and supplying new patches as and if required. However, working with industry peers and in an abundance of caution, we’re upgrading our version of log4j in all areas of our business that use this 3rd party component.
 
If you have further questions, speak to your account manager in the first instance.  We thank you for your patience in this matter.