EUVD-2022-0721

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Log4j 1.x JMSSink is vulnerable to remote code execution via deserialization of untrusted data

Reporter	Title	Published	Views	Family All 283
IBM Security Bulletins	Security Bulletin: Due to use of Apache Log4j, IBM Netcool/OMNIbus Probe DSL Factory Framework is vulnerable to arbitrary code execution (CVE-2022-23302, CVE-2022-23307) and SQL injection (CVE-2022-23305)	16 Mar 202202:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel	24 Jun 202511:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Datacap	12 Jan 202617:46	–	ibm
IBM Security Bulletins	Security Bulletin: An IBM QRadar SIEM SNMP protocol is vulnerable to a denial of service, SQL injection and could allow a remote attacker to execute arbitrary code on the system.	15 May 202408:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is potentially vulnerable to execution of arbitrary code due to its use of Apache Log4j (CVE-2022-23302)	21 Jul 202212:29	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Log4j vulnerability	14 Sep 202215:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to arbitrary code execution and SQL injection due to Apache Log4j. (CVE-2022-23302, CVE-2022-23307, CVE-2022-23305)	17 Feb 202217:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages with Watson has addressed Apache Log4j vulnerability (CVE-2022-23302)	11 Jul 202202:12	–	ibm
IBM Security Bulletins	Security Bulletin: Log4j vulnerabilities affect IBM Netezza Analytics	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Log4j vulnerability (CVE-2022-23302)	4 Apr 202205:24	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "4e7c65ee-79c3-3e60-9150-fdaad6933bf0",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4e9d0480-3a61-37f9-8403-f6b81e376095",
        "product": {
          "name": "Apache Log4j 1.x"
        },
        "product_version": "unspecified <2.0-alpha1"
      },
      {
        "id": "ce4f3adf-e964-382f-915e-d37e581703ad",
        "product": {
          "name": "Apache Log4j 1.x"
        },
        "product_version": "1.0.1 <unspecified"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23302
github	www.github.com/apache/logging-log4j1
lists	www.lists.apache.org/thread/bsr3l5qz4g0myrjhy9h67bcxodpkwj4w
logging	www.logging.apache.org/log4j/1.2/index.html
security	www.security.netapp.com/advisory/ntap-20220217-0006
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
openwall	www.openwall.com/lists/oss-security/2022/01/18/3
suse	www.suse.com/security/cve/CVE-2022-23302.html
access	www.access.redhat.com/errata/RHSA-2022:0661

03 Oct 2025 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.8

CVSS 26

EPSS0.00785