diff --git a/pom.xml b/pom.xml
index 4d8fb6a4f34c..2fba1d298548 100644
--- a/pom.xml
+++ b/pom.xml
@@ -192,7 +192,7 @@
         <zeppelin.version>0.9.0-preview2</zeppelin.version>
         <!-- for java 11-->
         <javax.annotation-api.version>1.3.2</javax.annotation-api.version>
-        <log4j.version>1.2.22</log4j.version>
+        <log4j.version>1.2.24</log4j.version>
         <lz4-java.version>1.8.0</lz4-java.version>
         <jackson-mapper-asl.version>1.9.13</jackson-mapper-asl.version>
         <jaxb-runtime.version>3.0.2</jaxb-runtime.version>