MiracleLinux 7 : log4j-1.2.17-17.0.1.el7.AXS7 (AXSA:2021-2848:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2848:01 advisory. log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender CVE-2021-4104 Tenable has extracted the preceding description blo...

org.zenframework.z8.dependencies:z8-dependencies-commons (=2.0) potentially affected by CVE-2019-17571 via org.zenframework.z8.dependencies.commons:log4j-1.2.17 (=2.0)

org.zenframework.z8.dependencies.commons:log4j-1.2.17 MAVEN version =2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.zenframework.z8.dependencies.commons:log4j-1.2.17 and may be impacted: - org.zenframework.z8.dependencies:z8-dependencies-commo...