Like many others here, I guess your companies are very concerned with the management of the latest log4j vulnerability. CVE - CVE-2021-44228 (mitre.org) Collibra is doing a great job of communicating updates on the trust center page: Status dashboard | Collibra but some info is lacking: How come the Edge servers are not impacted while they use log4j 2.13.3? Is there a security risk on elasticsearch? (i.e. is it internat facing?)

Log4J security incident | Product Q&A

Log4J security incident | Product Q&A | Collibra Community