Vendors / Qos Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 4
Exploited now Qos records in CISA KEV No Qos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 85
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.66537 · Published 2022-01-18 · Partial fix · 2.0-alpha1 CWE-89
Priority HIGH 76
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has ac…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.63841 · Published 2022-01-18 · Partial fix · 2.0-alpha1 CWE-502
Priority HIGH 73
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.54411 · Published 2022-01-18 · Partial fix CWE-502
Priority MEDIUM 56
A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04612 · Published 2021-06-16 · Fixed in 2.1.0 CWE-502
Priority LOW 29
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.08216 · Published 2020-04-27 · Partial fix · 2.12.3, 2.13.2 +1 CWE-295
Open these records in search → All records by CVSS severity
4 4 1 1 0
THREATIST.IORead the docs