CVE-2021-44228

99

FAUCET Score

CVE-2021-44228, widely known as Log4Shell, is a critical vulnerability in the Apache Log4j2 library that allows unauthenticated remote code execution via insecure JNDI lookups, impacting a vast ecosystem of vendors including Cisco, VMware, and Apple. With a maximum CVSS score of 10.0, this flaw enables attackers to compromise systems over the network with low complexity and no required privileges by injecting malicious payloads into log messages. The vulnerability is actively exploited in the wild, appearing in the CISA Known Exploited Vulnerabilities catalog with confirmed use in ransomware campaigns, and has widely available public exploit code across major frameworks like Metasploit.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 2.7.0CPE matchmatch criteria	cpe:2.3:o:siemens:6bk1602-0aa12-0tp0_firmware::::::::
		< 2.7.0CPE matchmatch criteria	cpe:2.3:o:siemens:6bk1602-0aa22-0tp0_firmware::::::::
		< 2.7.0CPE matchmatch criteria	cpe:2.3:o:siemens:6bk1602-0aa32-0tp0_firmware::::::::
		< 2.7.0CPE matchmatch criteria	cpe:2.3:o:siemens:6bk1602-0aa42-0tp0_firmware::::::::
		< 2.7.0CPE matchmatch criteria	cpe:2.3:o:siemens:6bk1602-0aa52-0tp0_firmware::::::::

CVSS Data

CVSS version used by this source: 3.1

10.0CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

6.0

CvssVersion

3.1

Exploit Intelligence

EPSS Score

100.00%

Probability of exploitation in next 30 days

EPSS Percentile

100.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

Added to KEV · Dec 10, 2021

Metasploit: MobileIron Core Unauthenticated JNDI Injection RCE (via Log4Shell) · Dec 12, 2021

Nuclei: CVE-2021-44228 · Dec 11, 2021

ExploitDB: EDB-51183 · Apr 1, 2023

This CVE's current EPSS score of 1.0000 is in the 100th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (104)

3cxpatch availablevia llm_extracted

barracudapatch availablevia llm_extracted

boschpatch availablevia llm_extracted

clamavpatch availablevia llm_extracted

consulpatch availablevia llm_extracted

coollabspatch availablevia llm_extracted

freshrsspatch availablevia llm_extracted

githubpatch availablevia llm_extracted

mavenpatch availablevia ghsa

Product: org.ops4j.pax.logging:pax-logging-log4j2Fixed in: 1.10.8

mavenpatch availablevia ghsa

Product: org.ops4j.pax.logging:pax-logging-log4j2Fixed in: 1.11.10

mavenpatch availablevia ghsa

Product: org.ops4j.pax.logging:pax-logging-log4j2Fixed in: 2.0.11

mavenpatch availablevia ghsa

Product: org.apache.logging.log4j:log4j-coreFixed in: 2.15.0

mavenpatch availablevia ghsa

Product: org.apache.logging.log4j:log4j-coreFixed in: 2.12.2

mavenpatch availablevia ghsa

Product: org.apache.logging.log4j:log4j-coreFixed in: 2.3.1

mavenpatch availablevia ghsa

Product: org.ops4j.pax.logging:pax-logging-log4j2Fixed in: 1.9.2

microsoftpatch availablevia msrc

Product: Azure DevOps

microsoftpatch availablevia msrc

Product: Team Foundation Server

microsoftpatch availablevia msrc

Product: SQL Server 2019 Big Data Clusters

microsoftpatch availablevia msrc

Product: Azure DevOps Server

microsoftpatch availablevia msrc

Product: Azure VMware Solution

microsoftpatch availablevia msrc

Product: Azure Databricks

microsoftpatch availablevia msrc

Product: Azure Arc-enabled Data Services

microsoftpatch availablevia msrc

Product: Minecraft Java EditionFixed in: 1.18.1

microsoftpatch availablevia msrc

Product: Microsoft Defender for IoTFixed in: 10.5.2

microsoftpatch availablevia msrc

Product: Azure Data Lake Store Java client SDK

microsoftpatch availablevia msrc

Product: Cosmos DB Kafka Connector

microsoftpatch availablevia msrc

Product: Azure Spring Cloud

microsoftpatch availablevia msrc

Product: Azure Data Lake Store Java tool

microsoftpatch availablevia msrc

Product: Azure Application Insights Java SDK

microsoftpatch availablevia msrc

Product: Events Hub Extension

nessuspatch availablevia llm_extracted

Fixed in: 1.3

omronpatch availablevia llm_extracted

oraclepatch availablevia nvd_reference

qdrantpatch availablevia llm_extracted

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.6Fixed in: openshift4/ose-metering-hive:v4.6.0-202112140546.p0.g8b9da97.assembly.stream

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.6Fixed in: openshift4/ose-metering-presto:v4.6.0-202112150545.p0.g190688a.assembly.art3595

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.7Fixed in: openshift4/ose-metering-hive:v4.7.0-202112140553.p0.g091bb99.assembly.stream

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.7Fixed in: openshift4/ose-metering-presto:v4.7.0-202112150631.p0.gd502108.assembly.4.7.40

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.8Fixed in: openshift4/ose-metering-hive:v4.8.0-202112132154.p0.g57dd03a.assembly.stream

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.8Fixed in: openshift4/ose-metering-presto:v4.8.0-202112150431.p0.g4b934ae.assembly.art3599

redhatpatch availablevia redhat_api

Product: RHPAM 7.11.1

redhatpatch availablevia redhat_api

Product: RHPAM 7.12.0Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Vert.x 4.1.5 SP1Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-velocity-0:1.7.0-3.redhat_00006.1.ep7.el7

redhatpatch availablevia redhat_api

Product: OpenShift Logging 5.0Fixed in: openshift-logging/elasticsearch6-rhel8:v5.0.10-1

redhatpatch availablevia redhat_api

Product: OpenShift Logging 5.1Fixed in: openshift-logging/elasticsearch6-rhel8:v6.8.1-67

redhatpatch availablevia redhat_api

Product: OpenShift Logging 5.2Fixed in: openshift-logging/elasticsearch6-rhel8:v6.8.1-66

redhatpatch availablevia redhat_api

Product: OpenShift Logging 5.3Fixed in: openshift-logging/elasticsearch6-rhel8:v6.8.1-65

redhatpatch availablevia redhat_api

Product: Red Hat AMQ Streams 1.6.5

redhatpatch availablevia redhat_api

Product: Red Hat AMQ Streams 1.8.4Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat Data Grid 8.2.2Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat Fuse 7.10Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat Fuse 7.8.2, 7.9.1, 7.10.1Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat IntegrationFixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat Integration Camel Quarkus 2

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: log4j-core

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-apache-cxf-0:3.1.16-4.redhat_00003.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jackson-databind-0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jettison-0:1.3.8-2.redhat_00002.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-netty-0:4.1.63-1.Final_redhat_00002.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-resteasy-0:3.0.27-1.Final_redhat_00001.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-snakeyaml-0:1.33.0-1.SP1_redhat_00001.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.1.9-2.GA_redhat_00002.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-hal-console-0:3.2.17-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-annotations-0:2.10.4-2.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-core-0:2.10.4-2.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-databind-0:2.10.4-4.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-jaxrs-providers-0:2.10.4-2.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-modules-base-0:2.10.4-4.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-modules-java8-0:2.10.4-2.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jettison-0:1.5.2-2.redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-netty-0:4.1.63-4.Final_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-resteasy-0:3.11.6-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-snakeyaml-0:1.33.0-1.SP1_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.3.12-3.GA_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 3.11Fixed in: openshift3/ose-logging-elasticsearch5:v3.11.570-2.gd119820

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.6Fixed in: openshift4/ose-logging-elasticsearch6:v4.6.0-202112132021.p0.g2a13a81.assembly.stream

samrocketmanpatch availablevia llm_extracted

symantecpatch availablevia llm_extracted

verbbpatch availablevia llm_extracted

ansiblevendor investigatingvia llm_extracted

apachevendor investigatingvia llm_extracted

bentomlvendor investigatingvia llm_extracted

capnprotovendor investigatingvia llm_extracted

cephvendor investigatingvia llm_extracted

ciscovendor investigatingvia llm_extracted

debianvendor investigatingvia llm_extracted

d-linkvendor investigatingvia llm_extracted

dogukanurkervendor investigatingvia llm_extracted

hedgedocvendor investigatingvia llm_extracted

hpvendor investigatingvia llm_extracted

humansignalvendor investigatingvia llm_extracted

hyperledgervendor investigatingvia llm_extracted

jenkinsvendor investigatingvia llm_extracted

kenticovendor investigatingvia llm_extracted

kongvendor investigatingvia llm_extracted

linuxvendor investigatingvia llm_extracted

lycheeorgvendor investigatingvia llm_extracted

m2teamvendor investigatingvia llm_extracted

netflixvendor investigatingvia llm_extracted

ptcvendor investigatingvia llm_extracted

roundcubevendor investigatingvia llm_extracted

yokogawavendor investigatingvia llm_extracted

redhatno patchvia redhat_api

Product: Red Hat Integration Camel Quarkus 1Fixed in: log4j-core

Vendor Advisories (53)

verbbllm-verbb-543b95d4c401d528

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

qdrantllm-qdrant-af0caffba9b2abad

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

barracudallm-barracuda-af8d79e5d61c6a4f

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

symantecllm-symantec-4371e9c73ac47a0f

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

freshrssllm-freshrss-979b674cecbf7667

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

boschllm-bosch-e97b75ff9f19c1ea

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

clamavllm-clamav-74c1f36ca2a2b103

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

consulllm-consul-56727e0e2c5a61f8

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

ptcllm-ptc-1a7dfac036d7e777

Okta On-Prem MFA Agent

omronllm-omron-3d172c38f70ef921

Okta RADIUS Server Agent

ansiblellm-ansible-0d2a913ec9f28e75

Okta RADIUS Server Agent

ansiblellm-ansible-d554f0a78a09b214

Okta On-Prem MFA Agent

omronllm-omron-1c93279dbfad2a06

Okta On-Prem MFA Agent

netflixllm-netflix-fea6058f2ab2f791

Okta On-Prem MFA Agent

netflixllm-netflix-81bfebdb514640ec

Okta RADIUS Server Agent

ptcllm-ptc-82743069d9afd29c

Okta RADIUS Server Agent

hyperledgerllm-hyperledger-0a534655922d0579CRITICAL

Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)

roundcubellm-roundcube-bf2fbc5dc95d4c06CRITICAL

Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)

cephllm-ceph-9d9c9e12248affaeCRITICAL

Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)

humansignalllm-humansignal-cf93a2c20c745b43CRITICAL

Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)

d-linkllm-d-link-2b726676a1308f5fCRITICAL

Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)

m2teamllm-m2team-01f5b8b40cc5477cCRITICAL

Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)

d-linkllm-d-link-20f39e25cea76c5fCRITICAL

Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products

hyperledgerllm-hyperledger-f29f3d801cb68028CRITICAL

Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products

cephllm-ceph-a2039da5e9b378f4CRITICAL

Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products

m2teamllm-m2team-fd218185b07cc095CRITICAL

Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products

roundcubellm-roundcube-973d1101d3777753CRITICAL

Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products

humansignalllm-humansignal-12e8acb84ccefbc7CRITICAL

Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products

githubllm-github-10c37a0302001c2f

AS-2021-001: Log4Shell (Log4j 2)

coollabsllm-coollabs-46da79932c430e92CRITICAL

SPS Apache Log4j Vulnerability

coollabsllm-coollabs-de5dc7fb3cfc06a0CRITICAL

HBT Apache Log4j Vulnerability

microsoft2021-Dec/CVE-2021-44228Critical

Apache Log4j Remote Code Execution Vulnerability

hedgedocllm-hedgedoc-4a615bf87a47e5e3

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

ciscollm-cisco-387b577d83f9ed2b

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

lycheeorgllm-lycheeorg-09b89315da092fa0

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

jenkinsllm-jenkins-7d91794cc1b2006b

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

hpllm-hp-2055d4c7f54b1803

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

yokogawallm-yokogawa-37145bd015de806f

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

capnprotollm-capnproto-b08e57af0276a29b

Log4Shell Vulnerability (CVE-2021-4104 / CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105 )

hpllm-hp-d817e7c9dd0cf144

Niagara log4j NO IMPACT

dogukanurkerllm-dogukanurker-86fa5cd6a520a264

Niagara log4j NO IMPACT

kenticollm-kentico-633a8657a357a7d6

Niagara log4j NO IMPACT

kongllm-kong-9b78aa14bb3732d7

Niagara log4j NO IMPACT

bentomlllm-bentoml-81609c37b431dd0c

Niagara log4j NO IMPACT

debianllm-debian-bdbb32cda56de0d1

CVE-2021-44228: Apache Log4j Vulnerability

samrocketmanllm-samrocketman-06cde3e9dcf8da99CRITICAL

NR21-04

nessusllm-nessus-7cf29848fe3ba3c4

CVE-2021-44228: Apache Log4j Vulnerability

apachellm-apache-744d5073ec4d4af9

Niagara log4j NO IMPACT

linuxllm-linux-2baaa6231ebad5ad

Niagara log4j NO IMPACT

redhatCVE-2021-44228Critical

log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value

mavenGHSA-jfh8-c2jp-5v3qcritical

Remote code injection in Log4j

3cxllm-3cx-b78bae857f56c8d1CRITICAL

NR21-03

samrocketmanllm-samrocketman-c1e5366fd9a505f5CRITICAL

NR21-03

References

cisa.gov / known-exploited-vulnerabilities-catalog

Third Party AdvisoryUS Government Resource

packetstormsecurity.com / files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/165260/VMware-Security-Advisory-2021-0028.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/165281/Log4j2-Log4Shell-Regexes.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/165282/Log4j-Payload-Generator.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/165306/L4sh-Log4j-Remote-Code-Execution.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/165311/log4j-scan-Extensive-Scanner.html

Broken LinkThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/165371/VMware-Security-Advisory-2021-0028.4.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/165532/Log4Shell-HTTP-Header-Injection.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html

Third Party AdvisoryVDB Entry

packetstormsecurity.com / files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html

ExploitThird Party AdvisoryVDB Entry

packetstormsecurity.com / files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html

Third Party AdvisoryVDB Entry

cert-portal.siemens.com / productcert/pdf/ssa-397453.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-479842.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-661247.pdf

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-714170.pdf

Third Party Advisory

seclists.org / fulldisclosure/2022/Dec/2

ExploitMailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/Jul/11

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/Mar/23

Mailing ListThird Party Advisory

github.com / cisagov/log4j-affected-db

Third Party Advisory

github.com / cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md

Broken LinkProductUS Government Resource

github.com / nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228

ExploitThird Party Advisory

lists.debian.org / debian-lts-announce/2021/12/msg00007.html

Mailing ListThird Party Advisory

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB

Release Notes

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM

Release Notes

logging.apache.org / log4j/2.x/security.html

Release NotesVendor Advisory

msrc-blog.microsoft.com / 2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2

PatchThird Party AdvisoryVendor Advisory

psirt.global.sonicwall.com / vuln-detail/SNWLID-2021-0032

Third Party Advisory

security.netapp.com / advisory/ntap-20211210-0007

Third Party Advisory

support.apple.com / kb/HT213189

Third Party Advisory

tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd

Third Party Advisory

twitter.com / kurtseifried/status/1469345530182455296

Broken LinkExploitThird Party Advisory

bentley.com / en/common-vulnerability-exposure/be-2022-0001

Third Party Advisory

debian.org / security/2021/dsa-5020

Mailing ListThird Party Advisory

intel.com / content/www/us/en/security-center/advisory/intel-sa-00646.html

Third Party Advisory

kb.cert.org / vuls/id/930724

Third Party AdvisoryUS Government Resource

nu11secur1ty.com / 2021/12/cve-2021-44228.html

ExploitThird Party Advisory

oracle.com / security-alerts/alert-cve-2021-44228.html

Third Party Advisory

oracle.com / security-alerts/cpuapr2022.html

PatchThird Party Advisory

oracle.com / security-alerts/cpujan2022.html

PatchThird Party Advisory

openwall.com / lists/oss-security/2021/12/10/1

Mailing ListMitigationThird Party Advisory

openwall.com / lists/oss-security/2021/12/10/2

Mailing ListMitigationThird Party Advisory

openwall.com / lists/oss-security/2021/12/10/3

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2021/12/13/1

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2021/12/13/2

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2021/12/14/4

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2021/12/15/3

Mailing ListThird Party Advisory