Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-9493
HistoryJun 16, 2021 - 8:15 a.m.

CVE-2020-9493

2021-06-1608:15:06
CWE-502
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.018 Low

EPSS

Percentile

88.4%

JSON

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.

Affected configurations

NVD
Node
apachechainsawRange<2.1.0
OR
apachelog4jRange1.2–2.0
Node
qosreload4jRange<1.2.18.1

Related

osv 3
prion 2
cvelist 2
cve 2
github 1
ubuntucve 1
f5 2
debiancve 1
nvd 1
ibm 12
atlassian 8
openvas 5
nessus 24
gentoo 1
oracle 1
osv
osv
CVE-2020-9493
2021-06-16 08:15:06
CVE-2022-23307
2022-01-18 16:15:08
Deserialization of Untrusted Data in Apache Log4j
2022-01-19 00:01:15
prion
prion
Deserialization of untrusted data
2021-06-16 08:15:00
Deserialization of untrusted data
2022-01-18 16:15:00
cvelist
cvelist
CVE-2020-9493 Java deserialization in Chainsaw
2021-06-16 07:30:11
CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
2022-01-18 15:25:23
cve
cve
CVE-2020-9493
2021-06-16 08:15:06
CVE-2022-23307
2022-01-18 16:15:08
github
github
Deserialization of Untrusted Data in Apache Log4j
2022-01-19 00:01:15
ubuntucve
ubuntucve
CVE-2022-23307
2022-01-18 00:00:00
f5
f5
K00322972 : Apache Log4j Chainsaw vulnerability CVE-2022-23307
2022-01-31 00:00:00
K34002344 : Overview of Log4j vulnerabilities (2021 and 2022)
2022-02-01 00:00:00
debiancve
debiancve
CVE-2022-23307
2022-01-18 16:15:08
nvd
nvd
CVE-2022-23307
2022-01-18 16:15:08
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM Security Verify Information Queue connect image (CVE-2020-9493, CVE-2022-23307)
2022-07-20 19:22:28
Security Bulletin: IBM InfoSphere Information Server may be affected by vulnerabilities in Apache log4j 1.x version
2022-10-14 22:13:39
Security Bulletin: IBM Sterling Order Management migration strategy to Apache Log4j vulnerability (see CVEs below)
2022-10-20 18:18:17
atlassian
atlassian
Update Log4j to 1.2.17-atlassian-16 to fix CVE-2022-23305, CVE-2022-23307, CVE-2020-9493, CVE-2022-23302
2022-07-04 12:01:19
Update Log4j to 1.2.17-atlassian-16 to fix CVE-2022-23305, CVE-2022-23307, CVE-2020-9493, CVE-2022-23302
2022-07-04 12:01:21
Confluence: Multiple vulnerabilities in log4j < 1.2.7-atlassian-16
2022-06-01 07:36:00
openvas
openvas
Apache Log4j 1.x Multiple Vulnerabilities (Windows, Jan 2022) - Version Check
2022-01-18 00:00:00
Apache Log4j 1.x Multiple Vulnerabilities (Linux/Unix, Jan 2022) - Version Check
2022-01-18 00:00:00
Huawei EulerOS: Security Advisory for log4j (EulerOS-SA-2022-1744)
2022-05-25 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : log4j (EulerOS-SA-2022-1744)
2022-05-27 00:00:00
Amazon Linux AMI : log4j (ALAS-2023-1718)
2023-04-06 00:00:00
openSUSE 15 Security Update : log4j (openSUSE-SU-2022:0214-1)
2022-01-28 00:00:00
gentoo
gentoo
Apache Log4j: Multiple Vulnerabilities
2024-02-18 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.018 Low

EPSS

Percentile

88.4%

JSON
Related for NVD:CVE-2020-9493
osv3prion2cvelist2cve2github1ubuntucve1f52debiancve1nvd1ibm12atlassian8openvas5nessus24gentoo1oracle1