All products

Red Hat Enterprise Linux 5/log4j

Red Hat · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Improper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488 · GHSA-VWQQ-5VRC-XW9H org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j MavenRed Hat Low Fix reported
Deserialization of Untrusted Data in Log4jCVE-2019-17571 · GHSA-2QRG-X229-3V8Q log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat Critical No fix reported
Deserialization of Untrusted Data in Log4jCVE-2017-5645 · GHSA-FXPH-Q3J8-MV87 org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j MavenRed Hat Critical Fix reported