General statement and FAQs Apache Log4j vulnerability

We monitor the situation closely. We use various detection methods that give us insight into the situation 24/7. If a vulnerability is detected, we are warned immediately and will resolve it as soon as possible. In the table below you can find the latest update on your Exact software. Regarding our key software platforms, the following:

• For Exact Online we didn’t find any vulnerabilities in the core product. 
• For Exact Globe we didn’t find any vulnerabilities in the core product .
• For Exact Synergy we didn’t find any vulnerabilities in the core product.
• For Exact Financials we didn’t find any vulnerabilities in the core product.

In the table below under 'Specific information Exact's software and services' you can find the latest update on your Exact software and services.

At this moment it’s not needed to perform an update or a patch for most of the Exact products. Only when using Elastic Search with Synergy or Consolidation powered by LucaNet you must make sure that you are using the latest version. If you need any help with updating or upgrading, please reach out to our consultancy or support departments.

As an IT service provider, Exact Cloud Services/Parentix is responsible for keeping your entire environment safe and up to date. We therefore ensure, in addition to the measures already taken, that if we find any vulnerability, we will patch or mitigate it as soon as possible.

As one of the extra measures related to the Apache Log4j vulnerability we have applied geo-blocking for our infrastructure. As a consequence, you may encounter an issue with accessing your Exact/Parentix environment. 

If you cannot make contact anymore to the Exact/Parentix environment due to this fact, we advise to make use of VP software. 

Alternatively, you can request us to whitelist the IP range of your company. This must be a fixed IP range. Unfortunately, dynamic ranges like mobile networks cannot be whitelisted. 

In case of any questions please reach out to our support team.

In the past, for the UK legislation HMRC IRmark functionality, IRMarkDOS files were needed. Since these files are no longer used within the Exact Globe Next software since 2019, they are no longer downloaded when installing or updating Exact Globe Next.

We also investigated the java based 3rd party component used for Spanish legislation (FacturaE). We have updated this component in the Servicepack of April 2022. With this update all Log4J components are removed and replaced.

In the table below you can find specific information on Exact’s software and services. We will continue to monitor the situation closely and update the table when applicable.