Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PT-2021-6084 · Logback +6 · Logback +6

🗓️ 16 Dec 2021 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Vulnerability in logback versions 1.2.7 and prior allows code execution via malicious configuration.

Related
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: A vulnerability in logback-classic affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-42550)
12 Jan 202321:59
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities
24 Apr 202415:52
–ibm
IBM Security Bulletins		Security Bulletin: CVE-2023-6378
12 Jul 202405:02
–ibm
IBM Security Bulletins		Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js (CVE-2022-43548, CVE-2020-7676, CVE-2021-42550, CVE-2021-38561, CVE-2022-32149)
22 Jun 202320:24
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System
31 Mar 202314:10
–ibm
IBM Security Bulletins		Security Bulletin:IBM Asset Data Dictionary Component uses logback-classic-1.3.0-alpha16.jar which is vulnerable to CVE-2023-6378
6 Feb 202412:56
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Logback might affect IBM Storage Copy Data Management
27 Sep 202418:26
–ibm
IBM Security Bulletins		Security Bulletin: There are multiple vulnerabilities in mas-data-dictionary-lib-1.0.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-1471, CVE-2023-1370 and CVE-2021-42550)
15 Jan 202418:29
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in QOS.ch Sarl Logback
31 Jan 202422:55
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM Operations Analytics Predictive Insights.
27 Mar 202415:37
–ibm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
02 Jul 2025 00:00Current
8High risk
Vulners AI Score8
CVSS 28.5
CVSS 3.17.1 - 7.5
EPSS0.02729
SSVC
logback vulnerabilitydeserialization exploitarbitrary code executionupgrade recommendationsconfiguration accessldap servers
1