{"id":4024,"date":"2026-06-08T18:04:56","date_gmt":"2026-06-08T15:04:56","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&p=4024"},"modified":"2026-06-08T18:04:56","modified_gmt":"2026-06-08T15:04:56","slug":"withsecure-elements-vulnerability-management-can-it-detect-cve-2021-44228-log4j2","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/withsecure-elements-vulnerability-management-can-it-detect-cve-2021-44228-log4j2\/","title":{"rendered":"WithSecure Elements Vulnerability Management – Can it detect CVE-2021-44228 (Log4j2) ?"},"content":{"rendered":"

Issue:<\/h3>\n
    \n
  1. I would like to confirm if WithSecure Elements Vulnerability Management (Radar) can detect CVE-2021-44228 (Log4j2)?<\/li>\n
  2. What is the schedule for adding detection for\u00a0CVE-2021-44228 (Log4j2)?<\/li>\n
  3. How can I verify when detection for\u00a0CVE-2021-44228 (Log4j2) is available?<\/li>\n<\/ol>\n

    Resolution:<\/h3>\n

    The detection of CVE-2021-44228<\/b> is available for selected software, following vendor security advisories publishing new versions of products with fixed and older versions of software that are marked as vulnerable.\u00a0 The list of affected software is constantly increasing, therefore more often re-scans should be considered. \u00a0<\/p>\n

    WithSecure does not recommend limiting the scanning template to specific plugins only. \u00a0<\/p>\n

    Moreover, F-Secure released System Scan plugins for Linux and Windows authenticated scans, where vulnerable libraries are being discovered on a local drive and listed in the plugin output.<\/b><\/p>\n

    In addition to the above, there is also a remote unauthenticated check that uses an exploit-based approach. A test with jndi:ldap<\/b> expression in the payload is performed and we listen for the signs of successful exploitation.<\/p>\n

    You can view the current list of Log4Shell \/ Log4Jam detection capabilities by following these steps:<\/p>\n

      \n
    1. Log in to the Elements Vulnerability Management portal<\/li>\n
    2. Go to the\u00a0Vulnerabilities\u00a0<\/b>page\u00a0<\/li>\n
    3. Select the\u00a0Vulnerability coverage\u00a0<\/b>tab<\/li>\n
    4. Click on the blue\u00a0Filter\u00a0<\/b>arrow\u00a0<\/li>\n
    5. Add the following filters:\n