On december 9th, Alibaba’s Cloud Security Team published a vulnerability in Log4j, a popular Java logging framework. Firely’s client product Forge and server products Simplifier.net and Firely Server are written for the Microsoft .NET platform and do not use the affected Java-based Log4j framework. We also do not use Log4n, the .NET port of Log4j. Simplifier runs Elastic Search internally as a third-party service for its search functionality, but we have determined that this component cannot be exploited. This means our products are not exposed to the vulnerabilities identified in CVE-2021-44228.
By Ewout Kramer
Ewout Kramer is one of the initiators of HL7 FHIR and a long-standing expert in healthcare information standards. With a background in computer science and decades of experience in healthcare IT, Ewout has played a key role in shaping how health information is exchanged and understood across systems. After early work with earlier generations of messaging standards, he collaborated with international leaders to design and document FHIR, a modern standard that has since become central to healthcare interoperability worldwide. As Firely's CTO, Ewout helps translate standards into practical solutions by embedding FHIR into real-world products and tools. Through consulting, coaching, and product development, he supports teams and organizations in adopting modern interoperability approaches that improve healthcare data exchange at scale.
