Lucene search
BADF55AF-60C5-5E33-BC19-5DC25FB9E196HistoryDec 15, 2021 - 5:48 a.m.
Exploit for Expression Language Injection in Apache Log4J
2021-12-1505:48:53
419
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.974 High
EPSS
Percentile
99.9%
Log4j 2.15.0 Privilege Escalation – CVE-2021-45046
Attack…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
nessus
nessus
freebsd
freebsd
OpenSearch -- Log4Shell
2021-12-14 00:00:00
graylog -- remote code execution in log4j from user-controlled log input
2021-11-14 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-15 09:01:37
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-01-05 04:13:59
Exploit for Expression Language Injection in Apache Log4J
2021-12-18 11:43:56
cnvd
cnvd
Apache log4j2 denial of service vulnerability
2021-12-16 00:00:00
kaspersky
kaspersky
KLA12391 RCE vulnerability in Apache Log4j
2021-12-14 00:00:00
osv
osv
apache-log4j2 - security update
2021-12-16 00:00:00
Incomplete fix for Apache Log4j vulnerability
2021-12-14 18:01:28
CVE-2021-45046
2021-12-14 19:15:07
ibm
ibm
vmware
vmware
suse
suse
Security update for log4j (important)
2021-12-20 00:00:00
Security update for log4j (important)
2021-12-17 00:00:00
prion
prion
Default configuration
2021-12-14 19:15:00
Race condition
2022-06-17 13:15:00
Authorization
2022-08-24 16:15:00
thn
thn
veracode
veracode
Denial Of Service (DoS)
2021-12-15 00:30:50
openvas
openvas
Apache Log4j 2.0.x Multiple Vulnerabilities (Web Application URL Parameter, Log4Shell) - Active Check
2022-03-30 00:00:00
Apache Log4j 2.0.x Multiple Vulnerabilities (UDP, Log4Shell) - Active Check
2021-12-13 00:00:00
Ubuntu: Security Advisory (USN-5197-1)
2021-12-16 00:00:00
redhatcve
redhatcve
CVE-2021-45046
2022-05-07 14:27:31
amazon
amazon
Critical: java-17-amazon-corretto, java-11-amazon-corretto, java-1.8.0-openjdk, java-1.7.0-openjdk
2021-12-17 18:12:00
Critical: java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk
2021-12-17 17:39:00
Critical: aws-kinesis-agent
2021-12-16 00:11:00
cve
cve
CVE-2021-45046
2021-12-14 19:15:00
CVE-2021-4125
2022-08-24 16:15:00
checkpoint_advisories
checkpoint_advisories
Apache Log4j Remote Code Execution (CVE-2021-44228; CVE-2021-45046)
2021-12-10 00:00:00
talosblog
talosblog
Quarterly Report: Incident Response Trends in Q2 2022
2022-07-26 14:03:00
Quarterly Report: Incident Response Trends in Q3 2022
2022-10-25 12:00:00
fortinet
fortinet
Apache log4j2 log messages substitution (CVE-2021-44228)
2021-12-12 00:00:00
redos
redos
ROS-20211223-01
2021-12-23 00:00:00
redhat
redhat
gentoo
gentoo
Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
nuclei
nuclei
Apache Log4j2 - Remote Code Injection
2021-12-23 15:41:50
securelist
securelist
CVE-2021-44228 vulnerability in Apache Log4j library
2021-12-13 14:10:21
Answering Log4Shell-related questions
2021-12-20 15:45:30
intel
intel
typo3
typo3
Statement on Recent log4j/log4shell Vulnerabilities (CVE-2021-44228)
2021-12-16 00:00:00
kitploit
kitploit
debiancve
debiancve
CVE-2021-45046
2021-12-14 19:15:00
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-15 00:00:00
threatpost
threatpost
APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools
2021-12-30 16:16:23
mssecure
mssecure
rapid7blog
rapid7blog
How to Protect Your Applications Against Log4Shell With tCell
2021-12-15 14:58:14
impervablog
impervablog
Log4Shell log4j Remote Code Execution – The COVID of the Internet
2022-01-06 16:41:56
cisa_kev
cisa_kev
Apache Log4j2 Deserialization of Untrusted Data Vulnerability
2023-05-01 00:00:00
github
github
Remote code injection in Log4j
2021-12-10 00:40:56
Incomplete fix for Apache Log4j vulnerability
2021-12-14 18:01:28
huawei
huawei
mageia
mageia
Updated log4j packages fix security vulnerability
2021-12-19 15:26:08
malwarebytes
malwarebytes
mmpc
mmpc
f5
f5
K32171392 : Apache Log4j2 vulnerability CVE-2021-45046
2021-12-16 00:00:00
attackerkb
attackerkb
CVE-2021-45046
2021-12-14 00:00:00
CVE-2021-44228 (Log4Shell)
2022-02-08 00:00:00
debian
debian
[SECURITY] [DSA 5022-1] apache-log4j2 security update
2021-12-16 10:29:17
ubuntucve
ubuntucve
CVE-2021-45046
2021-12-14 00:00:00
qualysblog
qualysblog
How to Discover Log4Shell Vulnerabilities in Running Containers & Images
2021-12-27 19:39:34
symantec
symantec
Symantec Security Advisory for Log4j Vulnerability
2021-12-11 01:06:47
fedora
fedora
[SECURITY] Fedora 34 Update: log4j-2.17.0-1.fc34
2021-12-27 00:56:30
avleonov
avleonov
Log4j “Log4Shell” RCE explained (CVE-2021-44228)
2021-12-26 22:07:17
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.974 High
EPSS
Percentile
99.9%
Related for BADF55AF-60C5-5E33-BC19-5DC25FB9E196