Lucene search

CVE-2022-23302

🗓️ 18 Jan 2022 16:08:15Reported by [email protected]Type

Log4j 1.x JMSSink deserialization vulnerabilit

Reporter	Title	Published	Views	Family All 199
Github Security Blog	Deserialization of Untrusted Data in Log4j 1.x	21 Jan 202223:27	–	github
Github Security Blog	Using JMSAppender in log4j configuration may lead to deserialization of untrusted data	17 Dec 202120:42	–	github
CVE	CVE-2022-23302	18 Jan 202216:15	–	cve
Prion	Deserialization of untrusted data	18 Jan 202216:15	–	prion
OSV	Deserialization of Untrusted Data in Log4j 1.x	21 Jan 202223:27	–	osv
OSV	CVE-2022-23302	18 Jan 202216:15	–	osv
OSV	apache-log4j1.2 - security update	31 Jan 202200:00	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 14 Security Update	29 Sep 202418:51	–	osv
OSV	Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.10-1]	29 Sep 202418:50	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update	29 Sep 202418:51	–	osv

Nvd

Node

apache log4jRange1.0.1–1.2.17

Node

netapp snapmanagerMatch-oracle

netapp snapmanagerMatch-sap

Node

broadcom brocade_sannavMatch-

Node

qos reload4jRange<1.2.18.1

Node

oracle advanced_supply_chain_planningMatch12.1

oracle advanced_supply_chain_planningMatch12.2

oracle business_intelligenceMatch5.9.0.0.0enterprise

oracle business_intelligenceMatch12.2.1.3.0enterprise

oracle business_intelligenceMatch12.2.1.4.0enterprise

oracle business_process_management_suiteMatch12.2.1.3.0

oracle business_process_management_suiteMatch12.2.1.4.0

oracle communications_eagle_ftp_table_base_retrievalMatch4.5

oracle communications_instant_messaging_serverMatch10.0.1.5.0

oracle communications_messaging_serverMatch8.1

oracle communications_network_integrityMatch7.3.6

oracle communications_offline_mediation_controllerRange<12.0.0.4.4

oracle communications_offline_mediation_controllerMatch12.0.0.5.0

oracle communications_unified_inventory_managementMatch7.4.1

oracle communications_unified_inventory_managementMatch7.4.2

oracle e-business_suite_cloud_manager_and_cloud_backup_moduleRange<2.2.1.1.1

oracle e-business_suite_cloud_manager_and_cloud_backup_moduleMatch2.2.1.1.1

oracle enterprise_manager_base_platformMatch13.4.0.0

oracle enterprise_manager_base_platformMatch13.5.0.0

oracle financial_services_revenue_management_and_billing_analyticsMatch2.7.0.0

oracle financial_services_revenue_management_and_billing_analyticsMatch2.7.0.1

oracle financial_services_revenue_management_and_billing_analyticsMatch2.8.0.0

oracle healthcare_foundationMatch8.1.0

oracle hyperion_data_relationship_managementRange<11.2.8.0

oracle hyperion_infrastructure_technologyRange<11.2.8.0

oracle identity_management_suiteMatch12.2.1.3.0

oracle identity_management_suiteMatch12.2.1.4.0

oracle identity_manager_connectorMatch11.1.1.5.0

oracle jdeveloperMatch12.2.1.3.0

oracle middleware_common_libraries_and_toolsMatch12.2.1.4.0

oracle mysql_enterprise_monitorRange≤8.0.29

oracle tuxedoMatch12.2.2.0.0

oracle weblogic_serverMatch12.2.1.3.0

oracle weblogic_serverMatch12.2.1.4.0

oracle weblogic_serverMatch14.1.1.0.0

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.apache.org/thread/bsr3l5qz4g0myrjhy9h67bcxodpkwj4w
logging	www.logging.apache.org/log4j/1.2/index.html
security	www.security.netapp.com/advisory/ntap-20220217-0006/
openwall	www.openwall.com/lists/oss-security/2022/01/18/3
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jan 2022 16:15Current

CVSS26.0

CVSS38.8

EPSS0.159

CWE-502