Red Hat JBoss Operations Network 3/log4j
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Improper validation of certificate with host mismatch in Apache Log4j SMTP appender | org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j | MavenRed Hat | Low | Fix reported | |
| SQL Injection in Log4j 1.2.x | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | Critical | No fix reported | |
| Deserialization of Untrusted Data in Log4j 1.x | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | High | No fix reported | |
| JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | High | No fix reported | |
| Deserialization of Untrusted Data in Apache Log4j | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | Critical | No fix reported |