Hi Don,I understand Apache Tomcat is open source and is bundles with SAP. Can you help if there is any impact on log4j.jar versions below 2 within Apache tomcat please. RegardsKarthik

Hi Edward,I had a connect with SAP team and they confirmed no impact on any of BI components and that includes crystal reports. However, you will need to validate log4j.jar versions of Apache Tomcat services and apply fix if the version you are on is...

Hi Dave,Please refer to the note released by SAP on this:3129956 - CVE-2021-44228 - BusinessObjects impact for Log4j vulnerabilityHope this helps.!RegardsKarthik