List of software (un)affected by the log4shell CVEs

June 15, 2022 · View on GitHub

0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

J

Supplier	Product	Version (see Status)	Status CVE-2021-4104	Status CVE-2021-44228	Status CVE-2021-45046	Status CVE-2021-45105	Notes	Links
Janitza	GridVis			Not vuln				link
Jamasoftware	All							Jamasoftware Statement
Jamf	Pro	10.31.0 – 10.34.0	Not vuln	Fix				Mitigating the Apache Log4j 2 Vulnerability
Jamf Nation	Health Care Listener			Not vuln				source
Jamf Nation	Jamf Cloud		Not vuln	Fix				source
Jamf Nation	Jamf Connect			Not vuln				source
Jamf Nation	Jamf Data Policy			Not vuln				source
Jamf Nation	Jamf Infrastructure Manager			Not vuln				source
Jamf Nation	Jamf Now			Not vuln				source
Jamf Nation	Jamf Private Access			Not vuln				source
Jamf Nation	Jamf Pro (hosted on-prem)	10.34.1		Fix			<10.14 vulnerable, 10.14-10.34 patch, >= 10.34.1 fix	source
Jamf Nation	Jamf Protect			Not vuln				source
Jamf Nation	Jamf School			Not vuln				source
Jamf Nation	Jamf Threat Defense			Not vuln				source
Jaspersoft	All							Jaspersoft Statement
Java Melody	All	1.90.0		Fix	Fix			source
Jazz/IBM	JazzSM DASH			Workaround			DASH on WebSphere Application Server requires mitigations	source
Jedox	All							Jedox Statement
Jenkins	CI			Not vuln			Invidivual plugins not developed as part of Jenkins core may be vulnerable.	source
Jenkins	CI/CD Core		Not vuln	Not vuln	Not vuln	Not vuln
Jenkins	Plugins						https://www.jenkins.io/blog/2021/12/10/log4j2-rce-CVE-2021-44228/ Instructions to test your installations in announcement	Announcement issue tracker
JetBrains	All .NET tools (ReSharper, Rider, ReSharper C++, dotTrace, dotMemory, dotCover, dotPeek)		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	Code With Me		Not vuln	Fix				source
JetBrains	Datalore		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	Floating license server	30241	Not vuln	Fix			update to https://www.jetbrains.com/help/license_server/release_notes.html#30241 log4j 2.16	source
JetBrains	Gateway		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	Hub	2021.1.14080	Not vuln	Fix				source
JetBrains	IntelliJ platform based IDEs (AppCode, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA Ultimate/Community/Edu, PhpStorm, PyCharm Professional/Community/Edu, Rider, RubyMine, WebStorm)		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	Kotlin		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	Ktor		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	MPS		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	Space		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	TeamCity		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	ToolBox		Not vuln	Not vuln	Not vuln	Not vuln		source
JetBrains	UpSource	2020.1.1952	Not vuln	Fix				source
JetBrains	YouTrack InCloud		Not vuln	Fix				source
JetBrains	YouTrack Standalone	2021.4.35970	Not vuln	Fix				source
JFrog	All			Not vuln				source
JGraph	DrawIO	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Jitsi	jitsi-videobridge	v2.1-595-g3637fda42	Not vuln	Fix				source
Jitterbit	All							Jitterbit Statement
Johnson Controls	Athena	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	BCPro	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	C•CURE Client	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	C•CURE Server	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	C•CURE Web	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	C•CURE‐9000	2.90.x, 2.80.x, 2.70.x and 2.60.x	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	CEM AC2000	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	CEM Hardware Products	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	CK721‐A (P2000)	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	CloudVue Gateway	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	CloudVue Web	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Connect24	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Connected Equipment Gateway (CEG)	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	DataSource	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	DLS	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Entrapass	All	Not vuln	Not vuln	Not vuln	Not vuln		Johnson Controls Advisory Link
Johnson Controls	exacqVision Client	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	exacqVision Server	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	exacqVision WebService	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Facility Explorer	14.x	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Illustra Cameras	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Illustra Insight	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	iSTAR	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Kantech Entrapass	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Metasys Products and Tools	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Active Responder	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Bridge	All	Not vuln	Fix				source
Johnson Controls	OpenBlue Chiller Utility Plant Optimizer	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Cloud	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Connected Chiller	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Enterprise Manager	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Location Manager	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Risk Insight	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Twin	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	OpenBlue Workplace	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	P2000	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	PowerSeries NEO	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	PowerSeries Pro	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Qolsys IQ Panels	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	RFID Overhead360° Backend	All	Not vuln	Fix			Cloud product	source
Johnson Controls	S321‐IP (P2000)	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Shoppertrak Analytics (STaN) ‐ Traffic	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Shoppertrak Market Intelligence	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Shoppertrak Perimeter Apps	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Shoppertrak Shopper Journey	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Shoppertrak Video Analytics	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Sur‐Gard Receivers	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	TrueVue Cloud	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Johnson Controls	Tyco AI	All	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	victor	5.x	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	victor/ C•CURE‐9000 Unified	3.81.x / victor 5.4.1 / C•CURE‐9000 2.80 and 3.91.x / victor 5.6.1 / C•CURE‐9000 2.90	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	VideoEdge	5.x	Not vuln	Not vuln	Not vuln	Not vuln		source
Johnson Controls	Xaap	All	Not vuln	Not vuln	Not vuln	Not vuln	Cloud product	source
Journyx	All							Journeyx Statement
jPOS	(ISO-8583) bridge			Not vuln				source
Jump Desktop	All							Jump Desktop Statement
Juniper Networks	Advanced Threat Prevention (JATP)			Not vuln				source
Juniper Networks	AppFormix			Not vuln				source
Juniper Networks	Apstra System			Not vuln				source
Juniper Networks	Connectivity Services Director			Not vuln				source
Juniper Networks	Contrail products: Contrail Analytics, Contrail Cloud, Contrail Networking or Contrail Service Orchestration			Not vuln				source
Juniper Networks	Cross Provisioning Platform			Investigation				source
Juniper Networks	CTPOS and CTPView			Not vuln				source
Juniper Networks	ICEAAA Manager			Not vuln				source
Juniper Networks	JATP Cloud			Not vuln				source
Juniper Networks	JSA Series			Investigation				source
Juniper Networks	Juniper Identity Management Services (JIMS)			Not vuln				source
Juniper Networks	Juniper Mist Edge			Not vuln				source
Juniper Networks	Juniper Sky Enterprise			Not vuln				source
Juniper Networks	Junos OS			Not vuln				source
Juniper Networks	Junos OS Evolved			Not vuln				source
Juniper Networks	Junos Space Network Management Platform			Vulnerable			Only when OpenNMS has been enabled.	source
Juniper Networks	Mist Access Points	Any version on AP12, AP21, AP32, AP33, AP34, AP41, AP43, AP45, AP61, AP63.		Not vuln				source
Juniper Networks	MIST: Juniper Networks Marvis Virtual Network Assistant (VNA)			Not vuln				source
Juniper Networks	MIST: Juniper Networks Mist AI			Not vuln				source
Juniper Networks	MIST: Juniper Networks Paragon Active Assurance			Not vuln				source
Juniper Networks	MIST: Juniper Networks WAN Assurance			Not vuln				source
Juniper Networks	MIST: Juniper Networks Wi-Fi Assurance			Not vuln				source
Juniper Networks	MIST: Juniper Networks Wired Assurance			Not vuln				source
Juniper Networks	Network Director			Not vuln				source
Juniper Networks	Northstar Controller			Vulnerable				source
Juniper Networks	Northstar Planner			Investigation				source
Juniper Networks	Paragon Insights	">= 21 version 21.1 ; >= 22 version 22.2"		Vulnerable				source
Juniper Networks	Paragon Pathfinder	">= 21 version 21.1 ; >= 22 version 22.2"		Vulnerable				source
Juniper Networks	Paragon Planner	">= 21 version 21.1 ; >= 22 version 22.2"		Vulnerable				source
Juniper Networks	Policy Enforcer			Not vuln				source
Juniper Networks	products using Wind River Linux in Junos OS and Junos OS Evolved			Not vuln				source
Juniper Networks	ScreenOS			Not vuln				source
Juniper Networks	SecIntel			Not vuln				source
Juniper Networks	Secure Analytics			Investigation				source
Juniper Networks	Security Director			Not vuln				source
Juniper Networks	Security Director Insights			Not vuln				source
Juniper Networks	Session Smart Router (Formerly 128T)			Not vuln				source
Juniper Networks	Space SDK			Not vuln				source
Juniper Networks	Standalone Log Collector 20.1 (as also used by Space Security Director)			Not vuln				source
Juniper Networks	User Engagement Virtual BLE			Not vuln				source
Justice Systems	All							Justice Systems Support