Security
فارسی
All products

Red Hat JBoss Fuse Service Works 6/log4j

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Improper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488 · GHSA-VWQQ-5VRC-XW9H org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j MavenRed Hat Low Fix reported
SQL Injection in Log4j 1.2.xCVE-2022-23305 · GHSA-65FG-84F6-3JQ3 log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat Critical No fix reported
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)CVE-2023-26464 · GHSA-VP98-W2P3-MV35 log4j:log4jorg.apache.logging.log4j:log4j-core MavenRed Hat High Fix reported
Deserialization of Untrusted Data in Log4j 1.xCVE-2022-23302 · GHSA-W9P3-5CR8-M3JJ log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat High No fix reported
Deserialization of Untrusted Data in Log4jCVE-2017-5645 · GHSA-FXPH-Q3J8-MV87 org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j MavenRed Hat Critical Fix reported
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted dataCVE-2021-4104 · GHSA-FP5R-V3W9-4333 log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat High No fix reported
Deserialization of Untrusted Data in Apache Log4jCVE-2022-23307 · GHSA-F7VH-QWP3-X37M log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat Critical No fix reported