Informatica bundles third-party libraries containing Log4j 1.x on all nodes in the domain and on all Developer tool machines. Not all third parties have remediated this issue, and Informatica is working with the vendors to resolve them. Informatica products are not exploitable or impacted by Log4j 1.x vulnerabilities that use default configurations.

For information about the impact due to the third-party libraries and the mitigation steps that you can take, see this Knowledge Base article: Apache Log4j Vulnerabilities related to Distribution Vendors