VIR Vulnerability Intelligence Relay

Package impact

java Maven / org.zenframework.z8.dependencies.commons:log4j-1.2.17

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2022-23305 critical 9.8 9.8 4y ago SQL Injection in Log4j 1.2.x debiansuserockylinuxjava+3
CVE-2019-17571 critical 9.8 9.8 7y ago Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization ga… debiansuseubuntujava+2
CVE-2022-23307 high 8.8 8.8 4y ago Deserialization of Untrusted Data in Apache Log4j debiansuserockylinuxjava+2
CVE-2022-23302 high 8.8 8.8 4y ago Deserialization of Untrusted Data in Log4j 1.x debiansuserockylinuxjava+3
CVE-2021-4104 high — 8.0 5y ago JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data debiansuserockylinuxjava