Login Request a demo
AL
Product
Apache Log4j2
by Apache Software Foundation · last CVE Dec 10, 2021
On CISA KEVExploited in the wildRansomware-linked
1
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities1In the news0Timeline
Severity mix
Critical 1High 0Medium 0Low 0
Severity
All severities1Critical1High0Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Apache Log4j2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-44228
RansomwareIn wildKEV
10.0
100%
Dec 10
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Affected: 2.0-beta9 before log4j-core*
Showing 1