We tried your suggestion and loaded reload4j. The customers scan is still picking up log4j version 1 as says this is not supported.
"Description: According to its self-reported version number, the installation of Apache Log4j on the remote host is 1.x and is no longer supported. Log4j...