Our current ITPAM version is 4.3.05 CP06 and EEM version is 12.6.1.0
We got the vulnerability in EEM reporting the unsupported version of log4j is used.
Release : 4.3.05 CP06
EEM version 12.6.1.0 uses log4j version 1.2.5
EEM version 12.6.4.0 was released with upgraded log4j version(2.17.1)
ITPAM development tested and ITPAM 4.3.05 CP06 works fine with EEM 12.6.4.0 version.
So, upgrade the EEM to 12.6.4.0 to resolve the mentioned vulnerability.