Read the docs
TI-2021-20437 Aliases CVE-2021-45105GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

Priority HIGH 72CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 17 fixed, 4 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-674.

Summary

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.99999 99th percentileScored 2026-11-07
Fix Partial Apache Log4j2 (Apache Software Foundation): 2.17.0org.apache.logging.log4j:log4j-core (Maven): 2.12.3, 2.17.0, 2.3.1+1 more productRed Hat: 18 advisoriesRed Hat: 17 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Log4j2log4j-core to before 2.17.02.17.0Patch availableCNA
—org.apache.logging.log4j:log4j-core (Maven)2.4.0 to before 2.12.32.12.3Patch availableGHSA-p6xc-xr62-6r2g
—org.apache.logging.log4j:log4j-core (Maven)2.13.0 to before 2.17.02.17.0Patch availableGHSA-p6xc-xr62-6r2g
—org.apache.logging.log4j:log4j-core (Maven)before 2.3.12.3.1Patch availableGHSA-p6xc-xr62-6r2g
—org.ops4j.pax.logging:pax-logging-log4j2 (Maven)1.8.0 to before 1.9.21.9.2Patch availableGHSA-p6xc-xr62-6r2g
—org.ops4j.pax.logging:pax-logging-log4j2 (Maven)1.10.0 to before 1.10.91.10.9Patch availableGHSA-p6xc-xr62-6r2g
—org.ops4j.pax.logging:pax-logging-log4j2 (Maven)1.11.0 to before 1.11.121.11.12Patch availableGHSA-p6xc-xr62-6r2g
—org.ops4j.pax.logging:pax-logging-log4j2 (Maven)2.0.0 to before 2.0.132.0.13Patch availableGHSA-p6xc-xr62-6r2g
  • Apache Log4j2 VendorApache Affected log4j-core to before 2.17.0 Fixed in 2.17.0 Patch available CNA
  • org.apache.logging.log4j:log4j-core (Maven) Vendor— Affected 2.4.0 to before 2.12.3 Fixed in 2.12.3 Patch available GHSA-p6xc-xr62-6r2g
  • org.apache.logging.log4j:log4j-core (Maven) Vendor— Affected 2.13.0 to before 2.17.0 Fixed in 2.17.0 Patch available GHSA-p6xc-xr62-6r2g
  • org.apache.logging.log4j:log4j-core (Maven) Vendor— Affected before 2.3.1 Fixed in 2.3.1 Patch available GHSA-p6xc-xr62-6r2g
  • org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Vendor— Affected 1.8.0 to before 1.9.2 Fixed in 1.9.2 Patch available GHSA-p6xc-xr62-6r2g
  • org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Vendor— Affected 1.10.0 to before 1.10.9 Fixed in 1.10.9 Patch available GHSA-p6xc-xr62-6r2g
  • org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Vendor— Affected 1.11.0 to before 1.11.12 Fixed in 1.11.12 Patch available GHSA-p6xc-xr62-6r2g
  • org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Vendor— Affected 2.0.0 to before 2.0.13 Fixed in 2.0.13 Patch available GHSA-p6xc-xr62-6r2g

CPE configurations NVD · 205

CPEVersionsRoleVendor
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*2.0 to before 2.3.1; 2.4 to before 2.12.3; 2.13.0 – 2.16.0VulnerableApache
cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*up to 10.0.12VulnerableSonicWall
cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:on-premises:*:*:*2.0 to before 3.0VulnerableSonicWall
cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:saas:*:*:*2.0 to before 3.0VulnerableSonicWall
cpe:2.3:a:sonicwall:web_application_firewall:*:*:*:*:*:*:*:*3.0.0 to before 3.1.0VulnerableSonicWall
cpe:2.3:o:sonicwall:6bk1602-0aa12-0tp0_firmware:*:*:*:*:*:*:*:*before 2.7.0VulnerableSonicWall
cpe:2.3:h:sonicwall:6bk1602-0aa12-0tp0:-:*:*:*:*:*:*:*not specified by NVDRunning onSonicWall
  • cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* Versions 2.0 to before 2.3.1; 2.4 to before 2.12.3; 2.13.0 – 2.16.0 Vulnerable ·Apache
  • cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* Versions up to 10.0.12 Vulnerable ·SonicWall
  • cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:on-premises:*:*:* Versions 2.0 to before 3.0 Vulnerable ·SonicWall
  • cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:saas:*:*:* Versions 2.0 to before 3.0 Vulnerable ·SonicWall
  • cpe:2.3:a:sonicwall:web_application_firewall:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.1.0 Vulnerable ·SonicWall
  • cpe:2.3:o:sonicwall:6bk1602-0aa12-0tp0_firmware:*:*:*:*:*:*:*:* Versions before 2.7.0 Vulnerable ·SonicWall
  • cpe:2.3:h:sonicwall:6bk1602-0aa12-0tp0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
Show 195 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:sonicwall:6bk1602-0aa22-0tp0_firmware:*:*:*:*:*:*:*:*before 2.7.0VulnerableSonicWall
cpe:2.3:h:sonicwall:6bk1602-0aa22-0tp0:-:*:*:*:*:*:*:*not specified by NVDRunning onSonicWall
cpe:2.3:o:sonicwall:6bk1602-0aa32-0tp0_firmware:*:*:*:*:*:*:*:*before 2.7.0VulnerableSonicWall
cpe:2.3:h:sonicwall:6bk1602-0aa32-0tp0:-:*:*:*:*:*:*:*not specified by NVDRunning onSonicWall
cpe:2.3:o:sonicwall:6bk1602-0aa42-0tp0_firmware:*:*:*:*:*:*:*:*before 2.7.0VulnerableSonicWall
cpe:2.3:h:sonicwall:6bk1602-0aa42-0tp0:-:*:*:*:*:*:*:*not specified by NVDRunning onSonicWall
cpe:2.3:o:sonicwall:6bk1602-0aa52-0tp0_firmware:*:*:*:*:*:*:*:*before 2.7.0VulnerableSonicWall
cpe:2.3:h:sonicwall:6bk1602-0aa52-0tp0:-:*:*:*:*:*:*:*not specified by NVDRunning onSonicWall
cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*6.2.1.0VulnerableOracle
cpe:2.3:a:oracle:agile_plm_mcad_connector:3.6:*:*:*:*:*:*:*3.6VulnerableOracle
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*9.3.6VulnerableOracle
cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*21.0.2VulnerableOracle
cpe:2.3:a:oracle:banking_deposits_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:*2.12.0VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*2.7.1VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*2.12.0VulnerableOracle
cpe:2.3:a:oracle:banking_loans_servicing:2.12.0:*:*:*:*:*:*:*2.12.0VulnerableOracle
cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*2.7.0VulnerableOracle
cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:*14.5VulnerableOracle
cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*2.6.2VulnerableOracle
cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*2.7.1VulnerableOracle
cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*2.12.0VulnerableOracle
cpe:2.3:a:oracle:banking_trade_finance:14.5:*:*:*:*:*:*:*14.5VulnerableOracle
cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*14.5VulnerableOracle
cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*5.5.0.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:*7.3VulnerableOracle
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:*12.0.0.4VulnerableOracle
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:*12.0.0.5VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*1.10.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*1.15.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:*1.15.1VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*1.8.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*1.15.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*1.15.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*1.15.0VulnerableOracle
cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0:*:*:*:*:*:*:*3.0.2.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_convergence:3.0.3.0:*:*:*:*:*:*:*3.0.3.0VulnerableOracle
cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:*12.0.1.0.0 – 12.0.4.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:*6.0.1.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*8.3.0.0 – 8.5.1.0VulnerableOracle
cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6:*:*:*:*:*:*:*46.6VulnerableOracle
cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:*4.5VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*before 9.0VulnerableOracle
cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*7.1VulnerableOracle
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*6.3VulnerableOracle
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*6.4VulnerableOracle
cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*7.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*8.1VulnerableOracle
cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*12.0.1.0.0 – 12.0.4.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:*6.0.1.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*7.3.6VulnerableOracle
cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3:*:*:*:*:*:*:*10.4.0.3VulnerableOracle
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:*12.0.0.4VulnerableOracle
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:*12.0.0.5VulnerableOracle
cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:*6.2VulnerableOracle
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*7.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*before 9.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*before 9.0VulnerableOracle
cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*7.3.5VulnerableOracle
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*7.4.1VulnerableOracle
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:*7.4.2VulnerableOracle
cpe:2.3:a:oracle:communications_user_data_repository:12.4:*:*:*:*:*:*:*12.4VulnerableOracle
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0.0:*:*:*:*:*:*:*7.2.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1:*:*:*:*:*:*:*7.2.1VulnerableOracle
cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:e-business_suite:12.2:*:*:*:*:*:*:*12.2VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*13.4.0.0VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*13.5.0.0VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.4.1.1:*:*:*:*:*:*:*13.4.1.1VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.5.1.1:*:*:*:*:*:*:*13.5.1.1VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*12.4.0.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*8.0.7 – 8.1.1VulnerableOracle
cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.0.8.0.0:*:*:*:*:*:*:*8.0.8.0.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.0.0.0:*:*:*:*:*:*:*8.1.0.0.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.1.0.0:*:*:*:*:*:*:*8.1.1.0.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*12.1.0 – 12.4; 14.0.0 – 14.3.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_universal_banking:11.83.3:*:*:*:*:*:*:*11.83.3VulnerableOracle
cpe:2.3:a:oracle:flexcube_universal_banking:14.5:*:*:*:*:*:*:*14.5VulnerableOracle
cpe:2.3:a:oracle:health_sciences_empirica_signal:9.1.0.6:*:*:*:*:*:*:*9.1.0.6VulnerableOracle
cpe:2.3:a:oracle:health_sciences_empirica_signal:9.2.0.0:*:*:*:*:*:*:*9.2.0.0VulnerableOracle
cpe:2.3:a:oracle:health_sciences_inform:6.2.1.1:*:*:*:*:*:*:*6.2.1.1VulnerableOracle
cpe:2.3:a:oracle:health_sciences_inform:6.3.2.1:*:*:*:*:*:*:*6.3.2.1VulnerableOracle
cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*7.0.0.0VulnerableOracle
cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:*3.0.1 – 3.0.4VulnerableOracle
cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:*7.3.0.1 – 7.3.0.4VulnerableOracle
cpe:2.3:a:oracle:healthcare_master_person_index:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:4.1.1:*:*:*:*:*:*:*4.1.1VulnerableOracle
cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:*8.13.0VulnerableOracle
cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:*8.14.0VulnerableOracle
cpe:2.3:a:oracle:hospitality_token_proxy_service:19.2:*:*:*:*:*:*:*19.2VulnerableOracle
cpe:2.3:a:oracle:hyperion_bi\+:*:*:*:*:*:*:*:*before 11.2.8.0VulnerableOracle
cpe:2.3:a:oracle:hyperion_data_relationship_management:*:*:*:*:*:*:*:*before 11.2.8.0VulnerableOracle
cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:*before 11.2.8.0VulnerableOracle
cpe:2.3:a:oracle:hyperion_planning:*:*:*:*:*:*:*:*before 11.2.8.0VulnerableOracle
cpe:2.3:a:oracle:hyperion_profitability_and_cost_management:*:*:*:*:*:*:*:*before 11.2.8.0VulnerableOracle
cpe:2.3:a:oracle:hyperion_tax_provision:*:*:*:*:*:*:*:*before 11.2.8.0VulnerableOracle
cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:identity_management_suite:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:identity_manager_connector:9.1.0:*:*:*:*:*:*:*9.1.0VulnerableOracle
cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*17.1VulnerableOracle
cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*17.2VulnerableOracle
cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*17.3VulnerableOracle
cpe:2.3:a:oracle:insurance_data_gateway:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableOracle
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*5.4 – 5.6.0.0VulnerableOracle
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:*5.2.0VulnerableOracle
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:*5.6.1.0VulnerableOracle
cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:management_cloud_engine:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableOracle
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*up to 8.0.29VulnerableOracle
cpe:2.3:a:oracle:payment_interface:19.1:*:*:*:*:*:*:*19.1VulnerableOracle
cpe:2.3:a:oracle:payment_interface:20.3:*:*:*:*:*:*:*20.3VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*8.58VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*8.59VulnerableOracle
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*17.12.0 – 17.12.11; 18.8.0 – 18.8.13; 19.12.0 – 19.12.12; 20.12.0 – 20.12.7VulnerableOracle
cpe:2.3:a:oracle:primavera_gateway:21.12.0:*:*:*:*:*:*:*21.12.0VulnerableOracle
cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*19.12.0.0 – 19.12.18.0; 20.12.0.0 – 20.12.12.0VulnerableOracle
cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:21.12.0.0:*:*:*:*:*:*:*21.12.0.0VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*18.8VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*19.12VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*20.12VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*21.12VulnerableOracle
cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_customer_insights:15.0.2:*:*:*:*:*:*:*15.0.2VulnerableOracle
cpe:2.3:a:oracle:retail_customer_insights:16.0.2:*:*:*:*:*:*:*16.0.2VulnerableOracle
cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:15.0.2:*:*:*:*:*:*:*15.0.2VulnerableOracle
cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:16.0.2:*:*:*:*:*:*:*16.0.2VulnerableOracle
cpe:2.3:a:oracle:retail_eftlink:16.0.3:*:*:*:*:*:*:*16.0.3VulnerableOracle
cpe:2.3:a:oracle:retail_eftlink:17.0.2:*:*:*:*:*:*:*17.0.2VulnerableOracle
cpe:2.3:a:oracle:retail_eftlink:18.0.1:*:*:*:*:*:*:*18.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_eftlink:19.0.1:*:*:*:*:*:*:*19.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_eftlink:20.0.1:*:*:*:*:*:*:*20.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_eftlink:21.0.0:*:*:*:*:*:*:*21.0.0VulnerableOracle
cpe:2.3:a:oracle:retail_financial_integration:*:*:*:*:*:*:*:*16.0.1 – 16.0.3VulnerableOracle
cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:*14.1.3.2VulnerableOracle
cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:*15.0.3.1VulnerableOracle
cpe:2.3:a:oracle:retail_financial_integration:19.0.0:*:*:*:*:*:*:*19.0.0VulnerableOracle
cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:*19.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:*16.0.1 – 16.0.3; 19.0.0 – 19.0.1.0VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:*14.1.3VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*14.1.3.2VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*15.0.3.1VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:19.0.0:*:*:*:*:*:*:*19.0.0VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*19.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_invoice_matching:15.0.3:*:*:*:*:*:*:*15.0.3VulnerableOracle
cpe:2.3:a:oracle:retail_invoice_matching:16.0.3:*:*:*:*:*:*:*16.0.3VulnerableOracle
cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*16.0.3VulnerableOracle
cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*19.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*16.0VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*18.0VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*19.1VulnerableOracle
cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:*19.5VulnerableOracle
cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.46:*:*:*:*:*:*:*14.1.3.46VulnerableOracle
cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.115:*:*:*:*:*:*:*15.0.3.115VulnerableOracle
cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.240:*:*:*:*:*:*:*16.0.3.240VulnerableOracle
cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:*13.2VulnerableOracle
cpe:2.3:a:oracle:retail_price_management:14.0.4:*:*:*:*:*:*:*14.0.4VulnerableOracle
cpe:2.3:a:oracle:retail_price_management:14.1.3.0:*:*:*:*:*:*:*14.1.3.0VulnerableOracle
cpe:2.3:a:oracle:retail_price_management:15.0.3.0:*:*:*:*:*:*:*15.0.3.0VulnerableOracle
cpe:2.3:a:oracle:retail_price_management:16.0.3.0:*:*:*:*:*:*:*16.0.3.0VulnerableOracle
cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*16.0.1 – 16.0.3VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:*14.1.3VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*14.1.3.2VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*15.0.3.1VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:19.0.0:*:*:*:*:*:*:*19.0.0VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*19.0.1VulnerableOracle
cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0:*:*:*:*:*:*:*19.0.1.0VulnerableOracle
cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4.13:*:*:*:*:*:*:*14.0.4.13VulnerableOracle
cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.5:*:*:*:*:*:*:*14.1.3.5VulnerableOracle
cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.14:*:*:*:*:*:*:*14.1.3.14VulnerableOracle
cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.3:*:*:*:*:*:*:*15.0.3.3VulnerableOracle
cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.8:*:*:*:*:*:*:*15.0.3.8VulnerableOracle
cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.7:*:*:*:*:*:*:*16.0.3.7VulnerableOracle
cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*up to 21.12VulnerableOracle
cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*before 21.4.2VulnerableOracle
cpe:2.3:a:oracle:taleo_platform:*:*:*:*:*:*:*:*before 22.1VulnerableOracle
cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*4.3.0.1.0 – 4.3.0.6.0VulnerableOracle
cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*4.4.0.0.0VulnerableOracle
cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*4.4.0.2.0VulnerableOracle
cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:*4.4.0.3.0VulnerableOracle
cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*14.1.1.0.0VulnerableOracle
  • cpe:2.3:o:sonicwall:6bk1602-0aa22-0tp0_firmware:*:*:*:*:*:*:*:* Versions before 2.7.0 Vulnerable ·SonicWall
  • cpe:2.3:h:sonicwall:6bk1602-0aa22-0tp0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
  • cpe:2.3:o:sonicwall:6bk1602-0aa32-0tp0_firmware:*:*:*:*:*:*:*:* Versions before 2.7.0 Vulnerable ·SonicWall
  • cpe:2.3:h:sonicwall:6bk1602-0aa32-0tp0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
  • cpe:2.3:o:sonicwall:6bk1602-0aa42-0tp0_firmware:*:*:*:*:*:*:*:* Versions before 2.7.0 Vulnerable ·SonicWall
  • cpe:2.3:h:sonicwall:6bk1602-0aa42-0tp0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
  • cpe:2.3:o:sonicwall:6bk1602-0aa52-0tp0_firmware:*:*:*:*:*:*:*:* Versions before 2.7.0 Vulnerable ·SonicWall
  • cpe:2.3:h:sonicwall:6bk1602-0aa52-0tp0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
  • cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:* Versions 6.2.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_plm_mcad_connector:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:* Versions 9.3.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:* Versions 21.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_deposits_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_loans_servicing:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:* Versions 14.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* Versions 2.6.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_trade_finance:14.5:*:*:*:*:*:*:* Versions 14.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:* Versions 14.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:* Versions 5.5.0.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:* Versions 12.0.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:* Versions 12.0.0.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0:*:*:*:*:*:*:* Versions 3.0.2.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_convergence:3.0.3.0:*:*:*:*:*:*:* Versions 3.0.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:* Versions 12.0.1.0.0 – 12.0.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:* Versions 6.0.1.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:* Versions 8.3.0.0 – 8.5.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6:*:*:*:*:*:*:* Versions 46.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:* Versions before 9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:* Versions 12.0.1.0.0 – 12.0.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:* Versions 6.0.1.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:* Versions 7.3.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3:*:*:*:*:*:*:* Versions 10.4.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:* Versions 12.0.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:* Versions 12.0.0.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* Versions before 9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:* Versions before 9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* Versions 7.3.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:* Versions 7.4.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:* Versions 7.4.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_user_data_repository:12.4:*:*:*:*:*:*:* Versions 12.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0.0:*:*:*:*:*:*:* Versions 7.2.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:e-business_suite:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:* Versions 13.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:* Versions 13.5.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.4.1.1:*:*:*:*:*:*:* Versions 13.4.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.5.1.1:*:*:*:*:*:*:* Versions 13.5.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* Versions 12.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* Versions 8.0.7 – 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.0.8.0.0:*:*:*:*:*:*:* Versions 8.0.8.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.0.0.0:*:*:*:*:*:*:* Versions 8.1.0.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.1.0.0:*:*:*:*:*:*:* Versions 8.1.1.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:* Versions 12.1.0 – 12.4; 14.0.0 – 14.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_universal_banking:11.83.3:*:*:*:*:*:*:* Versions 11.83.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_universal_banking:14.5:*:*:*:*:*:*:* Versions 14.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_empirica_signal:9.1.0.6:*:*:*:*:*:*:* Versions 9.1.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_empirica_signal:9.2.0.0:*:*:*:*:*:*:* Versions 9.2.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_inform:6.2.1.1:*:*:*:*:*:*:* Versions 6.2.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_inform:6.3.2.1:*:*:*:*:*:*:* Versions 6.3.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:* Versions 7.0.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:* Versions 3.0.1 – 3.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:* Versions 7.3.0.1 – 7.3.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_master_person_index:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:* Versions 8.13.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:* Versions 8.14.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_token_proxy_service:19.2:*:*:*:*:*:*:* Versions 19.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_bi\+:*:*:*:*:*:*:*:* Versions before 11.2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_data_relationship_management:*:*:*:*:*:*:*:* Versions before 11.2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:* Versions before 11.2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_planning:*:*:*:*:*:*:*:* Versions before 11.2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_profitability_and_cost_management:*:*:*:*:*:*:*:* Versions before 11.2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_tax_provision:*:*:*:*:*:*:*:* Versions before 11.2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:identity_management_suite:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:identity_manager_connector:9.1.0:*:*:*:*:*:*:* Versions 9.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:* Versions 17.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:* Versions 17.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:* Versions 17.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_data_gateway:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* Versions 5.4 – 5.6.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* Versions 5.6.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:management_cloud_engine:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* Versions up to 8.0.29 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:payment_interface:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:payment_interface:20.3:*:*:*:*:*:*:* Versions 20.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* Versions 8.58 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* Versions 8.59 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* Versions 17.12.0 – 17.12.11; 18.8.0 – 18.8.13; 19.12.0 – 19.12.12; 20.12.0 – 20.12.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_gateway:21.12.0:*:*:*:*:*:*:* Versions 21.12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* Versions 19.12.0.0 – 19.12.18.0; 20.12.0.0 – 20.12.12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:21.12.0.0:*:*:*:*:*:*:* Versions 21.12.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* Versions 18.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* Versions 19.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* Versions 20.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* Versions 21.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_customer_insights:15.0.2:*:*:*:*:*:*:* Versions 15.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_customer_insights:16.0.2:*:*:*:*:*:*:* Versions 16.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:15.0.2:*:*:*:*:*:*:* Versions 15.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:16.0.2:*:*:*:*:*:*:* Versions 16.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_eftlink:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_eftlink:17.0.2:*:*:*:*:*:*:* Versions 17.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_eftlink:18.0.1:*:*:*:*:*:*:* Versions 18.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_eftlink:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_eftlink:20.0.1:*:*:*:*:*:*:* Versions 20.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_eftlink:21.0.0:*:*:*:*:*:*:* Versions 21.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_financial_integration:*:*:*:*:*:*:*:* Versions 16.0.1 – 16.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:* Versions 14.1.3.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:* Versions 15.0.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_financial_integration:19.0.0:*:*:*:*:*:*:* Versions 19.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:* Versions 16.0.1 – 16.0.3; 19.0.0 – 19.0.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* Versions 14.1.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:* Versions 14.1.3.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:* Versions 15.0.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:19.0.0:*:*:*:*:*:*:* Versions 19.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_invoice_matching:15.0.3:*:*:*:*:*:*:* Versions 15.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_invoice_matching:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:* Versions 18.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:* Versions 19.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.46:*:*:*:*:*:*:* Versions 14.1.3.46 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.115:*:*:*:*:*:*:* Versions 15.0.3.115 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.240:*:*:*:*:*:*:* Versions 16.0.3.240 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_price_management:14.0.4:*:*:*:*:*:*:* Versions 14.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_price_management:14.1.3.0:*:*:*:*:*:*:* Versions 14.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_price_management:15.0.3.0:*:*:*:*:*:*:* Versions 15.0.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_price_management:16.0.3.0:*:*:*:*:*:*:* Versions 16.0.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:* Versions 16.0.1 – 16.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* Versions 14.1.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:* Versions 14.1.3.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:* Versions 15.0.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:19.0.0:*:*:*:*:*:*:* Versions 19.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0:*:*:*:*:*:*:* Versions 19.0.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4.13:*:*:*:*:*:*:* Versions 14.0.4.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.5:*:*:*:*:*:*:* Versions 14.1.3.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.14:*:*:*:*:*:*:* Versions 14.1.3.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.3:*:*:*:*:*:*:* Versions 15.0.3.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.8:*:*:*:*:*:*:* Versions 15.0.3.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.7:*:*:*:*:*:*:* Versions 16.0.3.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* Versions up to 21.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:* Versions before 21.4.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:taleo_platform:*:*:*:*:*:*:*:* Versions before 22.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* Versions 4.3.0.1.0 – 4.3.0.6.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:* Versions 4.4.0.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:* Versions 4.4.0.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:* Versions 4.4.0.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* Versions 14.1.1.0.0 Vulnerable ·Oracle

Remediation

  • Fix · CNA Apache Log4j2 (Apache Software Foundation) Fixed in 2.17.0
  • Fix · GHSA-p6xc-xr62-6r2g org.apache.logging.log4j:log4j-core (Maven) Fixed in 2.12.3 Advisory →
  • Fix · GHSA-p6xc-xr62-6r2g org.apache.logging.log4j:log4j-core (Maven) Fixed in 2.17.0 Advisory →
  • Fix · GHSA-p6xc-xr62-6r2g org.apache.logging.log4j:log4j-core (Maven) Fixed in 2.3.1 Advisory →
  • Fix · GHSA-p6xc-xr62-6r2g org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Fixed in 1.9.2 Advisory →
  • Fix · GHSA-p6xc-xr62-6r2g org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Fixed in 1.10.9 Advisory →
  • Fix · GHSA-p6xc-xr62-6r2g org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Fixed in 1.11.12 Advisory →
  • Fix · GHSA-p6xc-xr62-6r2g org.ops4j.pax.logging:pax-logging-log4j2 (Maven) Fixed in 2.0.13 Advisory →

Red Hat 18 advisories

  • RHSA-2022:1463 Released 2022-04-20 · Red Hat rating Low
    Red Hat Single Sign-On 7.5.2 security update on RHEL 8
    • Red Hat Single Sign-On 7.5 for RHEL 8 rh-sso7-keycloak-15.0.6-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-15.0.6-1.redhat_00001.1.el8sso
  • RHSA-2022:1462 Released 2022-04-20 · Red Hat rating Low
    Red Hat Single Sign-On 7.5.2 security update on RHEL 7
    • Red Hat Single Sign-On 7.5 for RHEL 7 Server rh-sso7-keycloak-15.0.6-1.redhat_00001.1.el7sso, rh-sso7-keycloak-server-15.0.6-1.redhat_00001.1.el7sso
  • RHSA-2022:1469 Released 2022-04-20 · Red Hat rating Low
    Red Hat Single Sign-On 7.5.2 security update
    • Red Hat Single Sign-On 7
Show 15 more Red Hat advisories
  • RHSA-2022:1299 Released 2022-04-11 · Red Hat rating Low
    Red Hat JBoss Enterprise Application Platform 7.4.4 security update
    • Red Hat JBoss Enterprise Application Platform org.apache.logging.log4j.log4j-api-2.17.1.redhat-00001.jar, org.jboss.logmanager.log4j-jboss-logmanager-1.2.2.Final-redhat-00002.jar
  • RHSA-2022:1297 Released 2022-04-11 · Red Hat rating Low
    Red Hat JBoss Enterprise Application Platform 7.4.4 security update
    • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-log4j-2.17.1-1.redhat_00001.1.el8eap
  • RHSA-2022:1296 Released 2022-04-11 · Red Hat rating Low
    Red Hat JBoss Enterprise Application Platform 7.4.4 security update
    • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-log4j-2.17.1-1.redhat_00001.1.el7eap
  • RHSA-2022:0223 Released 2022-01-20 · Red Hat rating Moderate
    Red Hat Integration Camel-K 1.6.3 release and security update
    • Red Hat Integration Camel-K 1.6.3
  • RHSA-2022:0222 Released 2022-01-20 · Red Hat rating Moderate
    Red Hat Integration Camel Extensions for Quarkus 2.2 security update
    • Red Hat Integration Camel Extensions for Quarkus 2.2
  • RHSA-2022:0219 Released 2022-01-20 · Red Hat rating Moderate
    Red Hat AMQ Streams 1.6.6 release and security update
    • Red Hat AMQ Streams 1.6.6
  • RHSA-2022:0216 Released 2022-01-20 · Red Hat rating Low
    Red Hat JBoss Enterprise Application Platform 7.4 security update
    • Red Hat JBoss Enterprise Application Platform org.apache.logging.log4j.log4j-api-2.17.1.redhat-00001.jar
  • RHSA-2022:0083 Released 2022-01-20 · Red Hat rating Moderate
    Red Hat build of Eclipse Vert.x 4.1.8 security update
    • Vert.x 4.1.8
  • RHSA-2022:0205 Released 2022-01-20 · Red Hat rating Moderate
    Red Hat Data Grid 8.2.3 security update
    • Red Hat Data Grid 8.2.3
  • RHSA-2022:0203 Released 2022-01-20 · Red Hat rating Critical
    Red Hat Fuse 7.8-7.10 security update
    • Red Hat Fuse 7.8.2, 7.9.1, 7.10.1
  • RHSA-2022:0026 Released 2022-01-12 · Red Hat rating Low
    OpenShift Container Platform 4.6.53 security update
    • Red Hat OpenShift Container Platform 4.6 openshift4/ose-logging-elasticsearch6
  • RHSA-2022:0047 Released 2022-01-10 · Red Hat rating Low
    Red Hat OpenShift Enterprise Logging security and bug fix update (5.0.11)
    • OpenShift Logging 5.0 openshift-logging/elasticsearch6-rhel8
  • RHSA-2022:0044 Released 2022-01-10 · Red Hat rating Important
    Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.2)
    • OpenShift Logging 5.3 openshift-logging/elasticsearch6-rhel8
  • RHSA-2022:0043 Released 2022-01-10 · Red Hat rating Low
    Red Hat OpenShift Enterprise Logging security and bug fix update (5.2.5)
    • OpenShift Logging 5.2 openshift-logging/elasticsearch6-rhel8
  • RHSA-2022:0042 Released 2022-01-10 · Red Hat rating Low
    Red Hat OpenShift Enterprise Logging security and bug fix update (5.1.6)
    • OpenShift Logging 5.1 openshift-logging/elasticsearch6-rhel8

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Decision Manager 7AffectedNo fix yet
Red Hat Integration Camel Quarkus 1AffectedNo fix yet
Red Hat OpenShift Container Platform 3.11AffectedNo fix yet
streams for Apache KafkaAffectedNo fix yet
OpenShift Logging 5.0Fixed RHSA-2022:0047
OpenShift Logging 5.1Fixed RHSA-2022:0042
OpenShift Logging 5.2Fixed RHSA-2022:0043
OpenShift Logging 5.3Fixed RHSA-2022:0044
Red Hat AMQ Streams 1.6.6Fixed RHSA-2022:0219
Red Hat Data Grid 8.2.3Fixed RHSA-2022:0205
Red Hat Fuse 7.8.2, 7.9.1, 7.10.1Fixed RHSA-2022:0203
Red Hat Integration Camel Extensions for Quarkus 2.2Fixed RHSA-2022:0222
Red Hat Integration Camel-K 1.6.3Fixed RHSA-2022:0223
Red Hat JBoss EAP 7.4 for RHEL 7 ServerFixed RHSA-2022:1296
Red Hat JBoss EAP 7.4 for RHEL 8Fixed RHSA-2022:1297
Red Hat JBoss Enterprise Application Platform Fixed RHSA-2022:0216
Red Hat OpenShift Container Platform 4.6Fixed RHSA-2022:0026
Red Hat Single Sign-On 7Fixed RHSA-2022:1469
Red Hat Single Sign-On 7.5 for RHEL 7 ServerFixed RHSA-2022:1462
Red Hat Single Sign-On 7.5 for RHEL 8Fixed RHSA-2022:1463
Vert.x 4.1.8Fixed RHSA-2022:0083
Not affected: 20 products
  • A-MQ Clients 2
  • OpenShift Logging 5.0
  • OpenShift Logging 5.1
  • OpenShift Logging 5.2
  • OpenShift Logging 5.3
  • Red Hat AMQ Broker 7
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • Red Hat JBoss EAP 7.4 for RHEL 8
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat JBoss Enterprise Application Platform 6
  • Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.6
  • Red Hat Process Automation 7
  • Red Hat Satellite 6
  • Red Hat Software Collections
  • Red Hat build of Quarkus

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-45105
  2. 2026-10-03 Alias added: GHSA-p6xc-xr62-6r2g

References

Patch 2

Advisory 12

Other 6

  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2021-20393 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack KEVCVSS 3.1CRITICAL 9.0
  • TI-2017-03645 Deserialization of untrusted data in Apache Log4j CVSS 3.1CRITICAL 9.8
  • TI-2019-13113 Deserialization of untrusted data in Apache Log4j CVSS 3.1CRITICAL 9.8
  • TI-2022-07428 SQL injection in JDBC Appender in Apache Log4j V1 CVSS 3.1CRITICAL 9.8
  • TI-2022-07425 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVSS 3.1HIGH 8.8
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences