--- title: Apache Log4j Vulnerability description: Aphex does not use Apache technology and therefore also does not use the Log4j library. --- [![Aphex FInal Logos RGB-03](https://blog.aphex.co/hubfs/Superseded/Aphex%20FInal%20Logos%20RGB-03.png)](https://www.aphex.co) [Log in](https://app.aphex.co/) [Try Aphex](https://app.aphex.co/sign-up) Product # Apache Log4j Vulnerability [Elliot Williams](https://blog.aphex.co/author/elliot-williams) Dec 18, 2021 [mailto:?subject=Check%20out%20https://blog.aphex.co/post/apache-log4j-vulnerability&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.aphex.co/post/apache-log4j-vulnerability&utm_medium=social&utm_source=email](mailto:?subject=Check%20out%20https://blog.aphex.co/post/apache-log4j-vulnerability&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.aphex.co/post/apache-log4j-vulnerability&utm_medium=social&utm_source=email) [Product](https://blog.aphex.co/tag/product) ### Background The Apache Log4j 2 utility is a commonly used component for logging requests across global technology infrastructure and applications. On December 9, 2021, a vulnerability was reported that could allow a system running Apache Log4j 2 version 2.15 or below to be compromised and allow an attacker to execute arbitrary code. Since that time, technology companies globally have been assessing the vulnerability, its implications broadly and for their systems, and taking appropriate mitigation actions. ### Impact for Aphex Since Dec 10th we have been assessing our systems in order to ensure that both our systems and our customer or user data remains secure. ### Aphex Systems Our first priority was to assess our core application and infrastructure (the things our customers would know as Aphex). **We can confirm that Aphex application and infrastructure does not use Apache technology and therefore also does not use the Log4j library.** ### **Subprocessor Systems** Our second priority was to assess all of our subprocessors to understand their exposure and evaluate their responses on a risk basis. As as a part of the SaaS ecosystem using best in class and market leading subprocessors, we expected at the outset that some would be using the common Apache technology, either directly or indirectly in their subprocessors. **We believe there to be no risk to customer data associated with the Log4j vulnerability.** To provide complete transparency, we have listed those subprocessors reporting direct or indirect exposure and their responses and actions below. A reminder that our full subprocessors list is maintained here. ### Affected Subprocessor List ![](https://blog.aphex.co/hubfs/Imported_Blog_Media/62071e089381c16e146c8dff_Screen%20Shot%202022-02-12%20at%2012_39_47-1.png) ‍ ## What next? No action is needed from our users or customers. We will continue to monitor the actions of our subprocessors and provide updates if anything changes. ## Similar posts Planning and Communication ### [It’s Time You Broke Up With Excel](https://blog.aphex.co/its-time-you-broke-up-with-excel) For years now, you’ve been going through the motions with Excel, but it just doesn’t quite work the way it should. It's time to move on ... Joseph Rudd Nov 30, 2022 Planning and Communication ### [Managing short term plans with Gantt Charts](https://blog.aphex.co/managing-short-term-plans-with-gantt-charts) Gantt charts are used to manage all types of projects in construction. And one thing they're particularly good for, is short-term scheduling. Joseph Rudd May 10, 2023 Planning and Communication ### [Managing construction projects with weekly work plans](https://blog.aphex.co/-construction-weekly-work-plans) Weekly work plans provide a detailed schedule of work over the coming week. Used the right way, they'll help you and your team stay on top of your... Joseph Rudd Apr 18, 2023 ### Subscribe today and get new blog posts sent straight to your mailbox Be the first to receive all the latest tips, insights, and updates when you subscribe to the Aphex blog.  ### Work Email [![Aphex Dark Tight](https://blog.aphex.co/hubfs/Aphex%20Dark%20Tight.png)](https://www.aphex.co/) Aphex Software Ltd 82 Wandsworth Bridge Road London, SW6 2TF [hello@aphex.co](mailto:hello@aphex.co) ### Product - [Engineers](https://www.aphex.co/engineers) - [Planners](https://www.aphex.co/planners) - [Project Managers](https://www.aphex.co/managers) - [Pricing and Plans](https://www.aphex.co/pricing) ### Customers - [Customer Stories](https://www.aphex.co/customers) ### Resources - [Help Center](http://help.aphex.co/) ### Company - [Blog](https://blog.aphex.co) - [Terms of Service](https://help.aphex.co/en/collections/3168676-terms-policies) © 2025 Aphex Software Limited All rights reserved [Privacy Policy](https://help.aphex.co/en/articles/5635735-privacy-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Elliot Williams", "url" : "https://blog.aphex.co/author/elliot-williams" }, "dateModified" : "2022-09-13T09:07:51.187Z", "datePublished" : "2021-12-18T00:00:00.000Z", "headline" : "Apache Log4j Vulnerability", "mainEntityOfPage" : { "@id" : "https://blog.aphex.co/post/apache-log4j-vulnerability", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.aphex.co/hubfs/Aphex%20FInal%20Logos%20RGB-03.png" }, "name" : "Aphex Software Ltd" } } ```