Question regarding ArcGIS Pro, "Recent releases of ArcGIS Pro contain Log4j but are not known to be exploitable as the software does not listen for remote traffic." What version is the Log4j on ArcGIS Pro 2.9? I just updated my ArcGIS Pro on my server and checked the file that I have "log4j-1.2.17.jar" version. Could I interpreted as ArcGIS Pro doesn't listen remote traffic, so shouldn't be an issue if I have an older version of log4j?
I'm on ArcGIS Enterprise 10.8.1, in place upgrade last October. I have log4j-1.2.17.jar version and someone mentioned 10.8.1 is shipped with log4j-2.x. Wondering if this wasn't updated during the upgrade?