diff --git a/java/pom.xml b/java/pom.xml
index 4b687f4f399..c1f9770bae0 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -59,7 +59,7 @@
         <!-- OpenCensus is used in grpc and Google's HTTP client libs in Cloud SDKs -->
         <opencensus.version>0.26.0</opencensus.version>
         <!-- Force log4j2 to 2.11+ to support objectMessageAsJsonObject -->
-        <log4jVersion>2.15.0</log4jVersion>
+        <log4jVersion>2.17.1</log4jVersion>
         <joda.time.version>2.9.9</joda.time.version>
         <jakarta.validation.api.version>2.0.2</jakarta.validation.api.version>
         <spring.security.oauth2.version>2.5.0.RELEASE</spring.security.oauth2.version>