Changing from Log4j to JUL

Hi, I've been trying to change Solr 6.6.3 logging function from using Log4j 1.2.17 to JUL by using SLF4J bridge to mitigate the security issues found on log4j 1.2.17

I tried removing the Log4j library and added slf4j-jdk14.jar and log4j-over-slf4j-1.7.7.

I want to know whether this change will create issues on Solr itself and whether  using JUL on Solr 6.6.3 have a vulnurability issues. Is there any disparity table between using JUL and Log4j on Solr?

Thank you for your advice