--- title: "Amplitude’s Response to Log4j Vulnerability" description: "Keeping our customers’ data safe is our number one priority, so we’re actively monitoring this issue and taking steps to mitigate appropriately." canonical: "https://amplitude.com/en-us/blog/log4j-vulnerability" --- # Amplitude’s Response to Log4j Vulnerability Keeping our customers’ data safe is our number one priority, so we’re actively monitoring this issue and taking steps to mitigate appropriately. Source: https://amplitude.com/en-us/blog/log4j-vulnerability --- [Olivia Rose](/blog/author/olivia-rose) [Former CISO, Vice President of Security & IT, Amplitude](/blog/author/olivia-rose) [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Famplitude.com%2Fblog%2F%2Fblog%2Flog4j-vulnerability)[](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Famplitude.com%2Fblog%2F%2Fblog%2Flog4j-vulnerability)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Famplitude.com%2Fblog%2F%2Fblog%2Flog4j-vulnerability\&text=Amplitude%E2%80%99s%20response%20to%20Log4j%20vulnerability)[](mailto:?subject=Checkout%20this%20Amplitude%20Article\&body=Check%20this%20out%3A%20https%3A%2F%2Famplitude.com%2Fblog%2F%2Fblog%2Flog4j-vulnerability) *Last updated December 20, 2021 at 10:15 a.m. PT* --- On December 9th, Apache disclosed a Critical Day 0 vulnerability ([CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228)) that affects its Log4j logging library. Currently, Amplitude is not aware of any impact within our systems, however, we are continuing our investigations as the industry learns more. Keeping our customers’ data safe is our number one priority, so we’re actively monitoring this issue and taking steps to mitigate appropriately. We have upgraded our Log4j instances with version 2.17, updated affected software per vendor instructions, and reached out to our relevant third-parties to determine their statuses. We are monitoring those who have not yet provided formal updates. There is no current action required of Amplitude customers. As we continue to gain an understanding of this vulnerability, the Amplitude team will continue to monitor our infrastructure for any potential exploits related to the vulnerability and proactively take steps to detect, mitigate, and remediate any malicious activity. We will keep you informed of any developments by adding onto this blog post. ## How to find more information on the Log4j vulnerability A flaw in the Log4j logging utility of widely used internet software Apache was discovered last week. Many internet-facing and back-end systems leverage this technology. The industry is continuing to learn more about the vulnerability, so we recommend reading [the NIST website](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) for developing information. We’re here to help. If you have additional questions, please reach out to [support.amplitude.com](http://support.amplitude.com). About the author Olivia Rose Former CISO, Vice President of Security & IT, Amplitude [More from Olivia](/blog/author/olivia-rose) Olivia Rose is the former CISO, Vice President of Security & IT at Amplitude. Previously, she was the Chief Information Security Officer at Mailchimp and Director of Global Executive Risk at Kudelski Security. [More from Olivia](/blog/author/olivia-rose) Topics #### Recommended Reading [Read ](/blog/lessons-from-consolidating-our-mcp-server) [Insights](/blog/lessons-from-consolidating-our-mcp-server) ###### [Lessons from consolidating our MCP server](/blog/lessons-from-consolidating-our-mcp-server) [Oct 6, 2026](/blog/lessons-from-consolidating-our-mcp-server) [10 min read](/blog/lessons-from-consolidating-our-mcp-server) [Read ](/blog/what-ai-engineers-do) [Insights](/blog/what-ai-engineers-do) ###### [What AI engineers do in the age of agentic code](/blog/what-ai-engineers-do) [Oct 1, 2026](/blog/what-ai-engineers-do) [14 min read](/blog/what-ai-engineers-do) [Read ](/blog/jev-analysis) [Insights](/blog/jev-analysis) ###### [An analysis of Jev: Faster and cheaper, but watch the accuracy](/blog/jev-analysis) [Sep 28, 2026](/blog/jev-analysis) [13 min read](/blog/jev-analysis) [Read ](/blog/ai-context-configuration) [Product](/blog/ai-context-configuration) ###### [Your agent isn’t broken. It’s guessing.](/blog/ai-context-configuration) [Sep 23, 2026](/blog/ai-context-configuration) [6 min read](/blog/ai-context-configuration) #### Explore Related Content [101](/compare/top-feature-flag-solutions-for-product-teams) ###### [9 Top Feature Flag Solutions for Modern Product Teams in 2026](/compare/top-feature-flag-solutions-for-product-teams) [Jan 27, 2026](/compare/top-feature-flag-solutions-for-product-teams) [Integration](/blog/amplitude-hubspot-behavioral-analytics) ###### [Using behavioral analytics for growth with the Amplitude app on HubSpot](/blog/amplitude-hubspot-behavioral-analytics) [Jun 17, 2024](/blog/amplitude-hubspot-behavioral-analytics) [10 min read](/blog/amplitude-hubspot-behavioral-analytics) [Personalization](/blog/identity-resolution-insights) ###### [Identity resolution: The secret to a 360-degree customer view](/blog/identity-resolution-insights) [Feb 16, 2024](/blog/identity-resolution-insights) [10 min read](/blog/identity-resolution-insights) [Product](/blog/warehouse-native-technical-deep-dive) ###### [Inside warehouse-native Amplitude: A technical deep dive](/blog/warehouse-native-technical-deep-dive) [Jun 27, 2023](/blog/warehouse-native-technical-deep-dive) [15 min read](/blog/warehouse-native-technical-deep-dive) [Guide](/resources/boost-customer-engagement) ###### [5 Proven Strategies to Boost Customer Engagement](/resources/boost-customer-engagement) [Jul 12, 2023](/resources/boost-customer-engagement) [Video](/designing-high-impact-experiments) ###### [Designing High-Impact Experiments](/designing-high-impact-experiments) [May 13, 2024](/designing-high-impact-experiments) [Startup](/blog/direct-to-consumer-marketing-tactics) ###### [9 direct-to-consumer marketing tactics to accelerate ecommerce growth](/blog/direct-to-consumer-marketing-tactics) [Feb 20, 2024](/blog/direct-to-consumer-marketing-tactics) [10 min read](/blog/direct-to-consumer-marketing-tactics) [Growth](/blog/analytics-product-market-fit) ###### [Leveraging analytics to achieve product-market fit](/blog/analytics-product-market-fit) [Jul 20, 2023](/blog/analytics-product-market-fit) [10 min read](/blog/analytics-product-market-fit)