diff --git a/billing-report-agent/gradle.properties b/billing-report-agent/gradle.properties
index ece04114f4..bc5bcbbda8 100644
--- a/billing-report-agent/gradle.properties
+++ b/billing-report-agent/gradle.properties
@@ -2,7 +2,7 @@ springBootVersion=2.0.2.RELEASE
 springDepVersion=1.0.6.RELEASE
 elasticsearchVersion=6.4.2
 lombokVersion=1.18.2
-log4jVersion=2.8
+log4jVersion=2.13.2
 retrofitVersion=2.4.0
 okhttpVersion=3.9.1
 swaggerVersion=2.6.1
diff --git a/data-sharing-service/api/build.gradle b/data-sharing-service/api/build.gradle
index d4b1ade410..c52fb0f426 100644
--- a/data-sharing-service/api/build.gradle
+++ b/data-sharing-service/api/build.gradle
@@ -57,7 +57,7 @@ dependencies {
     compile group: 'org.slf4j', name: 'slf4j-api', version: '1.7.24'
     compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version: '2.11.0'
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.11.0'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.11.0'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.13.2'
     compile group: 'org.apache.logging.log4j', name: 'log4j-jcl', version: '2.11.0'
 
     // Jackson
diff --git a/data-transfer-service/gradle.properties b/data-transfer-service/gradle.properties
index ac3f2ae27a..63fea8cf17 100644
--- a/data-transfer-service/gradle.properties
+++ b/data-transfer-service/gradle.properties
@@ -3,7 +3,7 @@ lombokVersion = 1.16.16
 junitVersion = 5.2.0
 mockitoVersion = 2.21.0
 hamcrestVersion = 1.3
-log4jVersion = 2.8
+log4jVersion = 2.13.2
 hsqldbVersion = 2.4.0
 vavrVersion = 0.9.0
 retrofitVersion = 2.3.0
diff --git a/docker-comp-scan/build.gradle b/docker-comp-scan/build.gradle
index 11a69fbae8..d2b5c66d2b 100644
--- a/docker-comp-scan/build.gradle
+++ b/docker-comp-scan/build.gradle
@@ -30,7 +30,7 @@ dependencies {
     compile group: 'org.slf4j', name: 'slf4j-api', version: '1.7.24'
     compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version: '2.8.2'
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.8.2'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.8.2'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.13.2'
     compile group: 'org.apache.logging.log4j', name: 'log4j-jcl', version: '2.8.2'
 
     compile group: 'com.google.code.findbugs', name: 'annotations', version: '3.0.1'
diff --git a/elasticsearch-agent/gradle.properties b/elasticsearch-agent/gradle.properties
index 4e7750b526..f80f171103 100644
--- a/elasticsearch-agent/gradle.properties
+++ b/elasticsearch-agent/gradle.properties
@@ -2,7 +2,7 @@ springBootVersion=2.0.2.RELEASE
 springDepVersion=1.0.6.RELEASE
 elasticsearchVersion=6.8.3
 lombokVersion=1.18.2
-log4jVersion=2.8
+log4jVersion=2.13.2
 retrofitVersion=2.4.0
 okhttpVersion=3.9.1
 swaggerVersion=2.6.1
diff --git a/jwt-generator/build.gradle b/jwt-generator/build.gradle
index 1c29cf4cf4..6439f62173 100644
--- a/jwt-generator/build.gradle
+++ b/jwt-generator/build.gradle
@@ -25,7 +25,7 @@ dependencies {
     compile group: "org.slf4j", name: "slf4j-api", version: "1.7.21"
     compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version: '2.7'
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.7'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.7'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.13.2'
 
     //commons
     compile group: 'commons-io', name: 'commons-io', version: '2.5'
diff --git a/notifier/smtp/build.gradle b/notifier/smtp/build.gradle
index c8d632c5ab..e690d5d9ea 100644
--- a/notifier/smtp/build.gradle
+++ b/notifier/smtp/build.gradle
@@ -30,7 +30,7 @@ dependencies {
     compile group: 'org.slf4j', name: 'slf4j-api', version: '1.7.24'
     compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version: '2.8'
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.8'
-    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.8'
+    compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: '2.13.2'
     compile group: 'org.apache.logging.log4j', name: 'log4j-jcl', version: '2.8'
 
     //DB
diff --git a/vm-monitor/gradle.properties b/vm-monitor/gradle.properties
index e94329a348..43372e2bf2 100644
--- a/vm-monitor/gradle.properties
+++ b/vm-monitor/gradle.properties
@@ -17,7 +17,7 @@
 springBootVersion=2.0.2.RELEASE
 springDepVersion=1.0.6.RELEASE
 lombokVersion=1.18.2
-log4jVersion=2.8
+log4jVersion=2.13.2
 retrofitVersion=2.4.0
 okhttpVersion=3.9.1
 mapstructVersion=1.2.0.Final