Hi @Devendran and welcome to the community 
you can follow this thread for more information about the current log4j CVE and SonarQube.
Your version is EOL tho. The current supported versions of SonarQube are 8.9.x and 9.2
hope that helps 
1 Like