David and Beat are correct, there are no reports that this would impact Dynamics GP at this time.
As always if you are on an "older" version of Dynamics GP it is a great time to look at upgrading. With items like this happening and it is very important to be on the latest and greatest versions of the product if you can.
Here is the lifecycle, you want to be on the latest code so you are receiving updates of the product, if you are on GP 2013, GP 2015 or GP 2016 an upgrade plan should be considered.
Software lifecycle policy - Dynamics GP | Microsoft Docs
Here is our recent release this October 2021- 18.4
Microsoft Dynamics GP October 2021 - Feature Blog Series Schedule! - Microsoft Dynamics GP Community
Also, the most recent upgrade blog series
Microsoft Dynamics GP 2021 Upgrade Blog Series Schedule - Microsoft Dynamics GP Community
Microsoft is aware of active exploitation of a critical Log4j Remote Code Execution vulnerability affecting various industry-wide Apache products. This vulnerability is in the open source Java component Log4J versions 2.0 through 2.14.1 (inclusive) and is documented in Apache CVE-2021-44228.
We are taking steps to keep customers safe and protected - including performing a cross-company assessment to identify and remediate any impacted Microsoft services. We are also investigating for potential customer/partner impact. As of December 14, 2021, Microsoft is not aware of any impact to the security of our enterprise services and has not experienced any degradation in the reliability or availability of those services as a result of this vulnerability. However, we are still actively investigating utilization of Log4j in our services, and this determination may be subject to change at any given time based upon investigative findings.
We are also investigating for potential customer/partner impact. If we identify any customer/partner impact, we will notify the affected party.
Please review the following guidance from Microsoft pertaining to this issue:
We encourage our customers to practice industry-standard best practices for security and data protection including embracing the Zero Trust Security model and adopting robust strategies to manage product security updates, endpoint security updates, and passwords. More information on Zero Trust Security is available at https://aka.ms/zerotrust. Additional information is available at https://www.microsoft.com/en-us/security.
Thanks
Terry Heley
Microsoft
