Hi Mayank, Could you confirm that you have also looked in to AEM Forms on JEE ? Is it advisable to mitigate the impact with the use JVM parameters ?i.e, "‐Dlog4j2.formatMsgNoLookups=true"

Good to have confirmation. We are in the same boat. Anyways I had already opened another thread so folks around here don't get confused. You can check this thread and comment on the thread so Adobe is aware. The response there also states that they are still investigating. https://experienceleagueco...

To be specific this version of AEM Forms JEE is not the standard offering. This is deployed on Jboss as WAR file and quite different from the AEM WCM.OSGI stack everyone here is aware of.This was a replacement of Livecycle application used to design and deploy Forms and not for designing websites i....

Regarding the new Apache Log4j vulnerability as per (CVE-2021-44228)The AEM Forms on JEE 6.5.8 uses the log4j 2.10, 2.11.1 versions. These versions are affected by this vulnerability. Could anyone else using it please confirm the same. There may be a temporary workaround to add "‐Dlog4j2.formatMsgNo...

The AEM Forms on JEE 6.5.8 uses the log4j 2.10, 2.11.1 versions. These versions are affected by this vulnerability. Could anyone else using it please confirm the same. There may be a temporary workaround to add "‐Dlog4j2.formatMsgNoLookups=true" but not a complete fix. I have already opened a ticket...

The AEM Forms on JEE 6.5.8 uses the log4j 2.10, 2.11.1 versions. These versions are affected by this vulnerability. Could you please confirm the same. I have already opened a ticket on the Daycare site but haven't had any response yet.