On December 10, 2021, Illumina was made aware of a vulnerability in the Apache Log4j software suite (CVE-2021-44228, CVE-2021-45046, and CVE-2021-44832). This software component is a Java-based logging utility and part of the Apache Logging Services Foundation products.

After Illumina became aware of the issue, we launched an investigation to identify potentially affected products and assess risk. The status for off-instrument software products is updated in the table below.

For more detailed updates on specific Illumina software products, Illumina recommends that our customers monitor the Technical Bulletins page. Illumina will continue to provide updates as necessary based on our investigation.

Illumina takes data privacy and security issues very seriously, and we hope this information helps alleviate any concerns about this vulnerability. If you have any questions, email Illumina Technical Support.

Terms:

• Impacted: The product contains one or more identified affected components.
• Not impacted: The product does not contain identified affected components.
• Patched: For Illumina-hosted solutions, updates have been applied to all in-scope instances.
• In progress: The product evaluation is underway.