Apache Log4j <=2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled (CVE-2021-44228).

CPENameOperatorVersion
fortisiemeq6.7.6
fortisiemeq6.7.5
fortisiemeq6.7.4
fortisiemeq6.7.3
fortisiemeq6.7.2
fortisiemeq6.7.1
fortisiemeq6.7.0
fortisiemeq6.6.3
fortisiemeq6.6.2
fortisiemeq6.6.1

Name	Operator	Version
fortisiem	eq	6.7.6
fortisiem	eq	6.7.5
fortisiem	eq	6.7.4
fortisiem	eq	6.7.3
fortisiem	eq	6.7.2
fortisiem	eq	6.7.1
fortisiem	eq	6.7.0
fortisiem	eq	6.6.3
fortisiem	eq	6.6.2
fortisiem	eq	6.6.1

Rows per page:

1-10 of 731

thn 3

nessus 18

vmware 10

ibm 102

githubexploit 8

veracode 1

prion 3

amazon 3

suse 2

cve 3

redhatcve 2

threatpost 2

intel 1

typo3 1

mssecure 1

debiancve 1

osv 4

kitploit 2

ubuntu 1

malwarebytes 1

mmpc 1

rapid7blog 2

impervablog 1

huawei 1

mageia 1

cisa_kev 1

redhat 4

f5 1

github 2

freebsd 1

checkpoint_advisories 1

talosblog 2

securelist 2

nuclei 1

attackerkb 2

debian 1

ubuntucve 1

qualysblog 2

symantec 1

ics 1

fedora 1

thn

Researchers Uncover New Drokbk Malware that Uses GitHub as a Dead Drop Resolver

2022-12-09 11:25:00

Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges

2021-12-16 06:24:00

Second Log4j Vulnerability (CVE-2021-45046) Discovered — New Patch Released

2021-12-15 05:26:00

nessus

Splunk Enterprise 8.1.x < 8.1.7.2 / 8.2.x < 8.2.3.3 Log4j

2022-02-25 00:00:00

Amazon Linux AMI : java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk (ALAS-2021-1553)

2021-12-18 00:00:00

Palo Alto Networks PAN-OS for Panorama < 9.0.15 / 9.1.12-h3 / 10.0.8-h8 Multiple RCE (Log4Shell)

2022-02-10 00:00:00

vmware

VMware Response to Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046)

2021-12-10 00:00:00

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

2021-12-10 00:00:00

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

2021-12-10 00:00:00

ibm

Security Bulletin: Apache Log4j vulnerability impacts IBM Sterling Global Mailbox (CVE-2021-45046)

2022-02-07 11:17:51

Security Bulletin: IBM MQ Blockchain bridge dependencies are vulnerable to an issue in Apache Log4j (CVE-2021-45046)

2021-12-20 11:51:39

Security Bulletin: IBM Cloud Pak for Data System 1.0 is vulnerable to arbitrary code execution due to Apache Log4j ( CVE-2021-45046)

2022-01-27 06:33:28

githubexploit

Exploit for Deserialization of Untrusted Data in Apache Log4J

2021-12-13 21:57:58

Exploit for Deserialization of Untrusted Data in Apache Log4J

2021-12-16 17:22:17

Exploit for Deserialization of Untrusted Data in Apache Log4J

2022-01-13 03:02:47

veracode

Denial Of Service (DoS)

2021-12-15 00:30:50

prion

Default configuration

2021-12-14 19:15:00

Race condition

2022-06-17 13:15:00

Authorization

2022-08-24 16:15:00

amazon

Critical: java-17-amazon-corretto, java-11-amazon-corretto, java-1.8.0-openjdk, java-1.7.0-openjdk

2021-12-17 18:12:00

Critical: java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk

2021-12-17 17:39:00

Critical: aws-kinesis-agent

2021-12-16 00:11:00

suse

Security update for log4j (important)

2021-12-20 00:00:00

Security update for log4j (important)

2021-12-17 00:00:00

cve

CVE-2021-45046

2021-12-14 19:15:00

CVE-2021-4125

2022-08-24 16:15:00

CVE-2022-33915

2022-06-17 13:15:00

redhatcve

CVE-2021-45046

2022-05-07 14:27:31

CVE-2021-4125

2021-12-16 02:02:08

threatpost

APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools

2021-12-30 16:16:23

Apache’s Fix for Log4Shell Can Lead to DoS Attacks

2021-12-15 14:04:19

intel

Intel® Product Advisory for Apache Log4j2 Vulnerabilities (CVE-2021-44228 & CVE-2021-45046)

2022-01-12 00:00:00

typo3

Statement on Recent log4j/log4shell Vulnerabilities (CVE-2021-44228)

2021-12-16 00:00:00

mssecure

MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations

2022-08-25 16:00:00

debiancve

CVE-2021-45046

2021-12-14 19:15:00

osv

Incomplete fix for Apache Log4j vulnerability

2021-12-14 18:01:28

CVE-2021-45046

2021-12-14 19:15:07

apache-log4j2 vulnerability

2021-12-15 19:02:14

kitploit

Log4J-Detector - Detects Log4J versions on your file-system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046

2021-12-20 04:38:00

log4j-scan - A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts

2021-12-20 11:30:00

ubuntu

Apache Log4j 2 vulnerability

2021-12-15 00:00:00

malwarebytes

[Update: CISA issues Log4j vulnerabilities scanner] Log4j zero-day “Log4Shell” arrives just in time to ruin your weekend

2021-12-10 18:03:28

mmpc

MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations

2022-08-25 16:00:00

rapid7blog

How to Protect Your Applications Against Log4Shell With tCell

2021-12-15 14:58:14

Active Exploitation of VMware Horizon Servers

2022-01-18 20:00:15

impervablog

Log4Shell log4j Remote Code Execution – The COVID of the Internet

2022-01-06 16:41:56

huawei

Security Advisory - Apache log4j2 remote code execution vulnerabilities in some Huawei products

2021-12-15 00:00:00

mageia

Updated log4j packages fix security vulnerability

2021-12-19 15:26:08

cisa_kev

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

2023-05-01 00:00:00

redhat

(RHSA-2021:5094) Moderate: OpenShift Container Platform 3.11.z security update

2021-12-14 05:40:01

(RHSA-2021:5106) Critical: OpenShift Container Platform 4.6.z security update

2021-12-16 06:06:42

(RHSA-2021:5108) Critical: OpenShift Container Platform 4.8.z security update

2021-12-14 14:18:30

K32171392 : Apache Log4j2 vulnerability CVE-2021-45046

2021-12-16 00:00:00

github

Remote code injection in Log4j

2021-12-10 00:40:56

Incomplete fix for Apache Log4j vulnerability

2021-12-14 18:01:28

freebsd

graylog -- remote code execution in log4j from user-controlled log input

2021-11-14 00:00:00

checkpoint_advisories

Apache Log4j Remote Code Execution (CVE-2021-44228; CVE-2021-45046)

2021-12-10 00:00:00

talosblog

Quarterly Report: Incident Response Trends in Q2 2022

2022-07-26 14:03:00

Quarterly Report: Incident Response Trends in Q3 2022

2022-10-25 12:00:00

securelist

CVE-2021-44228 vulnerability in Apache Log4j library

2021-12-13 14:10:21

Answering Log4Shell-related questions

2021-12-20 15:45:30

nuclei

Apache Log4j2 - Remote Code Injection

2021-12-23 15:41:50

attackerkb

CVE-2021-45046

2021-12-14 00:00:00

CVE-2022-33915

2022-06-17 00:00:00

debian

[SECURITY] [DSA 5022-1] apache-log4j2 security update

2021-12-16 10:29:17

ubuntucve

CVE-2021-45046

2021-12-14 00:00:00

qualysblog

How to Discover Log4Shell Vulnerabilities in Running Containers & Images

2021-12-27 19:39:34

6 Ways to Quickly Detect a Log4Shell Exploit in Your Environment

2021-12-20 05:41:36

symantec

Symantec Security Advisory for Log4j Vulnerability

2021-12-11 01:06:47

ics

Mitigating Log4Shell and Other Log4j-Related Vulnerabilities

2021-12-23 12:00:00

fedora

[SECURITY] Fedora 35 Update: log4j-2.17.0-1.fc35

2021-12-27 00:41:40

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.976 High

EPSS

Percentile

100.0%

JSON

Related for FG-IR-21-245