So far we can't confirm whether oVirt engine systems are affected or not: the oVirt infra team is digging into this.

I can confirm that ovirt-engine-wildfly is shipping a log4j version which is affected by the vulnerability and we are monitoring Wildfly project so we'll be able to ship an update as soon as a fix will be available (we are just repackaging the binary build they provide).

But I got no report so far confirming if the way we run Wildfly exposes the vulnerable system to potential attackers yet.