See Using JConsole to Monitor Applications for additional details on using JConsole to set the java.util.logging level of a Java application. Adjusting the Logging Level via VisualVM VisualVM is ...

CERT New Zealand warns that it's already being exploited in the wild. Systems and services that use the Java logging library, Apache Log4j between versions 2.0 and 2.14.1 are all affected ...

An attacker who can control log messages or log message parameters ... should migrate to version 2.8.2 or avoid using the socket server classes. Java 6 users should avoid using the TCP or UDP ...