...
We are aware of log4j being an extension of the DTS component in some versions of Microsoft SQL Server. PeopleSync neither uses nor requires DTS. As far as we can oversee this now, Microsoft is using a version of log4j not affected by this specific vulnerability. It may possibly be vulnerable to CVE-2021-4104 (https://bugzilla.redhat.com/show_bug.cgi?id=2031667). Microsoft Product Support Services will help you to remove or update the component if required.
...