log4j:log4j
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Deserialization of Untrusted Data in Log4j | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | Critical | No fix reported | |
| SQL Injection in Log4j 1.2.x | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | Critical | No fix reported | |
| Apache Log4j 1.x (EOL) allows Denial of Service (DoS) | log4j:log4jorg.apache.logging.log4j:log4j-core | MavenRed Hat | High | Fix reported | |
| Deserialization of Untrusted Data in Log4j 1.x | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | High | No fix reported | |
| JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | High | No fix reported | |
| Deserialization of Untrusted Data in Apache Log4j | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | Critical | No fix reported |