Lucene search

CVE-2021-4104

🗓️ 14 Dec 2021 12:12:15Reported by apacheType

cve🔗 web.nvd.nist.gov👁 838 Views🌐 15 Media mentions

JMSAppender in Log4j 1.2 allows remote code execution via JNDI request

Reporter	Title	Published	Views	Family All 199
Veracode	Deserialisation Of Untrusted Object	15 Dec 202113:38	–	veracode
IBM Security Bulletins	Security Bulletin: Log4j Vulnerability ( CVE-2021-44228 ) in IBM Informix Dynamic Server in Cloud Pak for Data	3 Feb 202218:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Informix Dynamic Server is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)	3 Feb 202218:00	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Log4j affects IBM InfoSphere Information Server (CVE-2021-44228)	14 Oct 202222:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Log4j affects some features of IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data (CVE-2021-44228)	21 Dec 202115:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Log4j affects IBM Cloud Pak for Network Automation (CVE-2021-44228)	15 Mar 202214:59	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2021-4104, CVE-2021-45046)	22 Dec 202107:09	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Netcool/OMNIbus WebGUI has multiple vulnerabilities in Apache log4j (CVE-2021-4104, CVE-2021-45046)	23 Dec 202101:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager for Enterprise Single Sign-On may be vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-4104)	31 Mar 202203:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in log4j v1.2 affects IBM Cloud Automation Manager	16 Mar 202216:05	–	ibm

Nvd

Vulners

Node

apache log4jMatch1.2

Node

fedoraproject fedoraMatch35

Node

redhat codeready_studioMatch12.0

redhat integration_camel_kMatch-

redhat integration_camel_quarkusMatch-

redhat jboss_a-mqMatch6.0.0

redhat jboss_a-mqMatch7

redhat jboss_a-mq_streamingMatch-

redhat jboss_data_gridMatch7.0.0

redhat jboss_data_virtualizationMatch6.0.0

redhat jboss_enterprise_application_platformMatch6.0.0

redhat jboss_enterprise_application_platformMatch7.0

redhat jboss_fuseMatch6.0.0

redhat jboss_fuseMatch7.0.0

redhat jboss_fuse_service_worksMatch6.0

redhat jboss_operations_networkMatch3.0

redhat jboss_web_serverMatch3.0

redhat openshift_application_runtimesMatch-

redhat openshift_container_platformMatch4.6

redhat openshift_container_platformMatch4.7

redhat openshift_container_platformMatch4.8

redhat process_automationMatch7.0

redhat single_sign-onMatch7.0

redhat software_collectionsMatch-

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

oracle advanced_supply_chain_planningMatch12.1

oracle advanced_supply_chain_planningMatch12.2

oracle business_intelligenceMatch5.9.0.0.0enterprise

oracle business_intelligenceMatch12.2.1.3.0enterprise

oracle business_intelligenceMatch12.2.1.4.0enterprise

oracle business_process_management_suiteMatch12.2.1.3.0

oracle business_process_management_suiteMatch12.2.1.4.0

oracle communications_eagle_ftp_table_base_retrievalMatch4.5

oracle communications_messaging_serverMatch8.1

oracle communications_network_integrityMatch7.3.6

oracle communications_offline_mediation_controllerRange<12.0.0.4.0

oracle communications_offline_mediation_controllerMatch12.0.0.5.0

oracle communications_unified_inventory_managementMatch7.3.4

oracle communications_unified_inventory_managementMatch7.3.5

oracle communications_unified_inventory_managementMatch7.4.1

oracle communications_unified_inventory_managementMatch7.4.2

oracle e-business_suite_cloud_manager_and_cloud_backup_moduleMatch2.2.1.1.1

oracle enterprise_manager_base_platformMatch13.4.0.0

oracle enterprise_manager_base_platformMatch13.5.0.0

oracle financial_services_revenue_management_and_billing_analyticsMatch2.7.0.0

oracle financial_services_revenue_management_and_billing_analyticsMatch2.7.0.1

oracle financial_services_revenue_management_and_billing_analyticsMatch2.8.0.0

oracle fusion_middleware_common_libraries_and_toolsMatch12.2.1.4.0

oracle goldengateMatch-

oracle healthcare_data_repositoryMatch8.1.0

oracle hyperion_data_relationship_managementRange<11.2.8.0

oracle hyperion_infrastructure_technologyRange<11.2.8.0

oracle identity_management_suiteMatch12.2.1.3.0

oracle identity_management_suiteMatch12.2.1.4.0

oracle jdeveloperMatch12.2.1.3.0

oracle mysql_enterprise_monitorRange≤8.0.29

oracle retail_allocationMatch14.1.3.2

oracle retail_allocationMatch15.0.3.1

oracle retail_allocationMatch16.0.3

oracle retail_allocationMatch19.0.1

oracle retail_extract_transform_and_loadMatch13.2.5

oracle stream_analyticsMatch-

oracle timesten_gridMatch-

oracle tuxedoMatch12.2.2.0.0

oracle utilities_testing_acceleratorMatch6.0.0.1.1

oracle utilities_testing_acceleratorMatch6.0.0.2.2

oracle utilities_testing_acceleratorMatch6.0.0.3.1

oracle weblogic_serverMatch12.2.1.3.0

oracle weblogic_serverMatch12.2.1.4.0

oracle weblogic_serverMatch14.1.1.0.0

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Log4j 1.x",
    "versions": [
      {
        "version": "Apache Log4j 1.2 1.2.x",
        "status": "affected"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/01/18/3
security	www.security.gentoo.org/glsa/202312-04
access	www.access.redhat.com/security/cve/CVE-2021-4104
kb	www.kb.cert.org/vuls/id/930724
security	www.security.netapp.com/advisory/ntap-20211223-0007/
github	www.github.com/apache/logging-log4j2/pull/608
security	www.security.gentoo.org/glsa/202310-16
security	www.security.gentoo.org/glsa/202209-02
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0033
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2021 12:15Current

9.4High risk

Vulners AI Score9.4

CVSS26

CVSS37.5

EPSS0.972