Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-23302

63
FAUCET Score

CVE-2022-23302 is a deserialization vulnerability in the JMSSink component of Apache Log4j 1.x, affecting products from vendors like Apache, Broadcom, and Oracle. An attacker with write access to the Log4j configuration or an accessible LDAP service can trigger JNDI requests, leading to remote code execution. This vulnerability carries a high CVSS score of 8.8 due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed on KEV, the vulnerability has garnered significant community discussion and media coverage, indicating awareness, though no public exploit code is currently available.

Impacted Technologies

VendorProductVersion(s)CPE
>= 1.0.1, <= 1.2.17CPE matchmatch criteria
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:broadcom:brocade_sannav:-:*:*:*:*:*:*:*
< 1.2.18.1CPE matchmatch criteria
cpe:2.3:a:qos:reload4j:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
61.79%
Probability of exploitation in next 30 days
EPSS Percentile
99.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.6179 is in the 99th percentile among its peer group of 17,823 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (185)

oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: EAP 6.4.24 release
View patch
redhatpatch availablevia redhat_api
Product: EAP 6.4 log4j asyncFixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AMQ Streams 1.6.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AMQ Streams 2.0.1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Data Grid 7.3.9Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 Extended Lifecycle SupportFixed in: log4j-0:1.2.14-6.6.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.3 Advanced Update SupportFixed in: log4j-0:1.2.17-17.el7_3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)Fixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Telco Extended Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Update Services for SAP SolutionsFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Telco Extended Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Update Services for SAP SolutionsFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: parfait:0.5-8050020220124063900.6b489b78
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: parfait:0.5-8010020220124232535.d5701770
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: parfait:0.5-8020020220124231008.1c5d4e8a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: parfait:0.5-8040020220124230039.d304d9ed
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Fuse 7.10.1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Fuse/AMQ 6.3.20Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Data Virtualization 6.4.8.SP1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Data Virtualization 6.4.8.SP2Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-log4j-0:2.17.1-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-log4j-0:2.17.1-1.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3.1Fixed in: log4j-eap6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-46.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-49.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.23-26.redhat_26.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.4.10Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.5 for RHEL 7Fixed in: rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el7sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.5 for RHEL 8Fixed in: rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el8sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-maven36-log4j12-0:1.2.17-23.4.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: org.ovirt.engine-root-0:4.4.10.6-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: snmp4j-0:3.6.4-0.1.el8ev
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso74-openshift-rhel8:7.4-45
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso74-openj9-openshift-rhel8:7.4-60
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso75-openshift-rhel8:7.5-17
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso7-rhel8-operator-bundle:7.5.1-9
View patch
redhatpatch availablevia redhat_api
Product: RHSSO 7.5.1Fixed in: log4j
View patch
redhatno patchvia redhat_api
Product: A-MQ Clients 2Fixed in: log4j
redhatno patchvia redhat_api
Product: Red Hat AMQ Broker 7Fixed in: log4j
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-metering-hadoop
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-metering-hive
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-metering-presto

Vendor Advisories (2)

mavenGHSA-w9p3-5cr8-m3jjhigh

Deserialization of Untrusted Data in Log4j 1.x

Jan 21, 2022
redhatCVE-2022-23302Moderate

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink

Jan 18, 2022

References

vicarius.io / vsociety/posts/cve-2022-23302-detect-log4j-1217-vulnerability
vicarius.io / vsociety/posts/cve-2022-23302-mitigate-log4j-1217-vulnerability
lists.apache.org / thread/bsr3l5qz4g0myrjhy9h67bcxodpkwj4w
Mailing ListMitigationVendor Advisory
logging.apache.org / log4j/1.2/index.html
Vendor Advisory
security.netapp.com / advisory/ntap-20220217-0006
Third Party Advisory
oracle.com / security-alerts/cpuapr2022.html
PatchThird Party Advisory
oracle.com / security-alerts/cpujul2022.html
PatchThird Party Advisory
openwall.com / lists/oss-security/2022/01/18/3
Mailing ListThird Party Advisory