All Products
Search

This Product

    ApsaraDB RDS:[Product changes/Feature changes] Apache Log4j2 JNDI vulnerability (CVE-2021-44228) has no impacts on ApsaraDB RDS

    Document Center

    ApsaraDB RDS:[Product changes/Feature changes] Apache Log4j2 JNDI vulnerability (CVE-2021-44228) has no impacts on ApsaraDB RDS

    Last Updated:Mar 30, 2026

    ApsaraDB RDS is not affected by the Apache Log4j 2 remote code execution (RCE) vulnerability (CVE-2021-44228).

    Background

    CVE-2021-44228 is a critical RCE vulnerability in Apache Log4j 2, a Java-based logging library. Alibaba Cloud Computing Co., Ltd. discovered the vulnerability and reported it to the Apache Software Foundation.

    The ApsaraDB RDS technical team has verified that the vulnerability has no impacts on ApsaraDB RDS.

    References

    For the full impact assessment, see Alibaba Cloud Statement on the Impact Assessment of Apache Log4j2 RCE Vulnerability (CVE-2021-44228)Apache Log4j2 RCE Vulnerability (CVE-2021-44228/CVE-2021-45046) Notice.