My client is running CF 2021 and as part of the install an older version of log4j is installed at:

@Graham I replied to your post in #cfml-general because that's the one I saw first. Please don't cross post the same question in multuple channels

I apologise. Won't happen again!