Our security team is telling us we need to upgrade log4j used by Workload Automation Agent to version 2.25.3 or later.
Workload Automation Agent 12.1.x, 24.0, 24.1
The mentioned vulnerability is considered to have a medium impact only when the Log4j2 SocketAppender functionality is used. The Workload Automation Agent does not utilize this specific functionality of Log4j2; therefore, Agent is not impacted by this vulnerability.