Is there a way to mitigate any risk associated with the log4j vulnerability in FME Products?

  • FME Desktop
  • FME Server
  • FME License Server (FlexLM)

1 Answer 1


At the time of writing, Safe Software have written a blog about the impacts of the log4j vulnerability in FME Desktop, FME Server and the FME License Server software.

The blog states that Safe do not have concerns about the vulnerability, however, they recommend that users upgrade to the newest version of FME when it becomes available.

Only FME versions 2021.0 and newer contain the vulnerable versions of log4j, so FME 2020.2 and older do not need to be updated as they do not contain a version of log4j that is included in the vulnerability.

Further, if users wanted to upgrade, Safe provided instructions for updating the log4j files used by FME Server and FME Desktop. FME License Server is not affected.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.