Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache log4j vulnerabilities and exploits

(subscribe to this query)

7.5
CVE-2023-26464
** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on which logging...
Apache Log4j
9.8
CVSSv3
CVE-2020-9493
A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution....
Apache ChainsawApache Log4jQos Reload4j
8.1
CVE-2021-4125
It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift...
Redhat OpenshiftApache Hive
9.8
CVSSv3
CVE-2019-17571
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects...
Apache Log4jDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Opensuse Leap 15.1Netapp Oncommand Workflow Automation -Netapp Oncommand System ManagerOracle Retail Service Backbone 14.1Oracle Weblogic Server 12.1.3.0.0Oracle Retail Service Backbone 15.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Endeca Information Discovery Studio 3.2.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Financial Services Lending And LeasingOracle Financial Services Lending And Leasing 12.5.0Oracle Communications Network IntegrityOracle Primavera GatewayOracle Retail Service Backbone 16.0Oracle Retail Extract Transform And Load 19.0Oracle Mysql Enterprise MonitorApache Bookkeeper
6.6
CVSSv3
CVE-2021-44832
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP...
Apache Log4j 2.0Apache Log4jOracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Weblogic Server 12.2.1.4.0Oracle Primavera Unifier 19.12Oracle Weblogic Server 14.1.1.0.0Oracle Primavera Unifier 20.12Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Primavera GatewayOracle Retail Assortment Planning 16.0.3Oracle Primavera Unifier 21.12Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera Gateway 21.12.0Oracle Retail Fiscal Management 14.2Oracle Siebel Ui Framework 21.12Oracle Communications Diameter Signaling RouterCisco Cloudcenter 4.10.0.16Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 18.0Oracle Siebel Ui FrameworkOracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Retail Order Broker 19.1Oracle Policy AutomationOracle Product Lifecycle Analytics 3.6.1Oracle Retail Xstore Point Of Service 21.0.1Oracle Policy Automation For Mobile DevicesOracle Health Sciences Data Management Workbench 3.0.0.0Oracle Health Sciences Data Management Workbench 3.1.0.3Oracle Health Sciences Data Management Workbench 2.5.2.1Oracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Offline Mediation Controller 12.0.0.5.0Oracle Communications Offline Mediation ControllerOracle Communications Brm - Elastic Charging Engine
9
CVSSv3
CVE-2021-45046
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout...
Apache Log4j 2.0Apache Log4jIntel Oneapi -Intel Audio Development Kit -Intel Datacenter Manager -Intel System Debugger -Intel Secure Device Onboard -Intel Sensor Solution Firmware Development Kit -Intel Computer Vision Annotation Tool -Intel Genomics Kernel Library -Intel System Studio -Siemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation CenterSiemens Desigo Cc Info Center 5.0Siemens Desigo Cc Info Center 5.1Siemens Desigo Cc Advanced Reports 4.1Siemens Desigo Cc Advanced Reports 4.2Siemens Desigo Cc Advanced Reports 5.0Siemens Desigo Cc Advanced Reports 5.1Siemens Desigo Cc Advanced Reports 4.0Siemens ComosSiemens Captial 2019.1Siemens NavigatorSiemens Xpedition Package Integrator -Siemens Xpedition Enterprise -Siemens Vesys 2019.1Siemens VesysSiemens CaptialSiemens Industrial Edge ManagementSiemens Industrial Edge Management HubSiemens MendixSiemens MindsphereSiemens NxSiemens Opcenter IntelligenceSiemens Operation SchedulerSiemens Sentron Powermanager 4.1Siemens Sentron Powermanager 4.2Siemens Siguard Dsa 4.2Siemens Siguard Dsa 4.3Siemens Siguard Dsa 4.4Siemens Siveillance VantageSiemens Siveillance ViewpointSiemens Solid Edge Cam ProSiemens Solid Edge Harness DesignSiemens Solid Edge Harness Design 2020Siemens Spectrum Power 7Siemens Spectrum Power 7 2.30Siemens TeamcenterSiemens TracealertserverplusDebian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Email SecurityFedoraproject Fedora 34Fedoraproject Fedora 35Siemens 6bk1602-0aa12-0tp0 FirmwareSiemens 6bk1602-0aa22-0tp0 FirmwareSiemens 6bk1602-0aa32-0tp0 FirmwareSiemens 6bk1602-0aa42-0tp0 FirmwareSiemens 6bk1602-0aa52-0tp0 Firmware
8.8
CVSSv3
CVE-2021-3100
The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges....
Amazon Log4jhotpatch
8.8
CVSSv3
CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Identity Manager Connector 11.1.1.5.0Oracle Communications Unified Inventory Management 7.4.2Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Identity Management Suite 12.2.1.4.0Oracle Financial Services Revenue Management And Billing Analytics 2.7.0.0Oracle Hyperion Data Relationship ManagementOracle Financial Services Revenue Management And Billing Analytics 2.8.0.0Oracle Mysql Enterprise MonitorOracle Hyperion Infrastructure TechnologyOracle Tuxedo 12.2.2.0.0Oracle E-business Suite Cloud Manager And Cloud Backup ModuleOracle E-business Suite Cloud Manager And Cloud Backup Module 2.2.1.1.1Oracle Financial Services Revenue Management And Billing Analytics 2.7.0.1Oracle Communications Offline Mediation Controller 12.0.0.5.0Oracle Communications Offline Mediation Controller
8.8
CVSSv3
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists....
Apache ChainsawApache Log4jQos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Retail Extract Transform And Load 13.2.5Oracle Identity Manager Connector 11.1.1.5.0Oracle Communications Unified Inventory Management 7.4.2Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Identity Management Suite 12.2.1.4.0Oracle Financial Services Revenue Management And Billing Analytics 2.7.0.0Oracle Hyperion Data Relationship ManagementOracle Financial Services Revenue Management And Billing Analytics 2.8.0.0Oracle Mysql Enterprise MonitorOracle Hyperion Infrastructure TechnologyOracle Tuxedo 12.2.2.0.0Oracle E-business Suite Cloud Manager And Cloud Backup ModuleOracle E-business Suite Cloud Manager And Cloud Backup Module 2.2.1.1.1Oracle Financial Services Revenue Management And Billing Analytics 2.7.0.1Oracle Communications Offline Mediation Controller 12.0.0.5.0Oracle Communications Offline Mediation Controller
3.7
CVSSv3
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1...
Apache Log4jOracle Flexcube Private Banking 12.1.0Oracle Retail Integration Bus 14.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Retail Integration Bus 15.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Data Integrator 12.2.1.3.0Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Market Risk Measurement And Management 8.0.6Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Jd Edwards World Security A9.4Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Policy Automation Connector For Siebel 10.4.6Oracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Retail Integration Bus 16.0Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Application Session Controller 3.9m0p1Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Unified Inventory Management 7.3.0Oracle Enterprise Manager For Peoplesoft 13.4.1.1Oracle Financial Services Institutional Performance Analytics 8.0.6Oracle Financial Services Institutional Performance Analytics 8.1.0Oracle Financial Services Institutional Performance Analytics 8.7.0Oracle Financial Services Market Risk Measurement And Management 8.0.8Oracle Financial Services Market Risk Measurement And Management 8.1.0Oracle Financial Services Price Creation And Discovery 8.0.6Oracle Financial Services Retail Customer Analytics 8.0.6Oracle Flexcube Core BankingOracle Insurance Insbridge Rating And UnderwritingOracle Insurance Insbridge Rating And Underwriting 5.6.1.0Oracle Insurance Policy Administration J2ee 10.2.0.37Oracle Insurance Policy Administration J2ee 10.2.4.12Oracle Insurance Policy Administration J2ee 11.0.2.25Oracle Insurance Policy Administration J2ee 11.1.0.15Oracle Insurance Rules Palette 10.2.0.37Oracle Insurance Rules Palette 10.2.4.12Oracle Insurance Rules Palette 11.0.2.25Oracle Insurance Rules Palette 11.1.0.15Oracle Insurance Rules Palette 11.2.0.26Oracle Policy AutomationOracle Policy Automation For Mobile DevicesOracle Retail Advanced Inventory Planning 14.1Oracle Retail Assortment Planning 15.0.3.0Oracle Retail Assortment Planning 16.0.3.0Oracle Retail Bulk Data Integration 15.0.3.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Retail Order Broker Cloud Service 16.0Oracle Retail Order Broker Cloud Service 18.0Oracle Retail Order Broker Cloud Service 19.0Oracle Retail Order Broker Cloud Service 19.1Oracle Retail Order Broker Cloud Service 19.3Oracle Retail Predictive Application Server 14.1.3.0Oracle Retail Predictive Application Server 15.0.3.0Oracle Spatial And Graph 18cOracle Spatial And Graph 19cOracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Services Gatekeeper 7.0Oracle Data Integrator 12.2.1.4.0Oracle Health Sciences Information Manager 3.0.1Oracle Insurance Policy Administration J2ee 11.2.0.26Oracle Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Retail Eftlink 15.0.2Oracle Retail Eftlink 16.0.3Oracle Retail Eftlink 17.0.2Oracle Retail Eftlink 18.0.1Oracle Retail Eftlink 19.0.1Oracle Retail Insights Cloud Service Suite 19.0Oracle Retail Order Broker Cloud Service 19.2Oracle Retail Predictive Application Server 16.0.3.0Oracle Retail Xstore Point Of Service 15.0.4Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Siebel Apps - MarketingOracle Siebel Ui FrameworkOracle Spatial And Graph 12.2.0.1Oracle Storagetek Acsls 8.5.1Oracle Storagetek Tape Analytics Sw Tool 2.3.1Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Qos Reload4j
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
wirelessSQLCVE-2023-1454overflowCVE-2022-48425CVE-2023-25064CVE-2023-28107
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook