Stop API Manager service.
ColdFusion API Manager updates
After applying the update, all log 4j 2.x-related jars will be upgraded to version 2.16.0.
If you had applied the mitigation steps in Log4j vulnerability on ColdFusion, we still strongly recommend that you apply this fix.
Follow the steps below to replace the jars: