Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-23305

68
FAUCET Score

CVE-2022-23305 is a critical SQL injection vulnerability affecting Log4j 1.2.x's JDBCAppender, which is not enabled by default. This flaw allows attackers to execute arbitrary SQL queries by injecting crafted strings into application inputs that are subsequently logged, impacting products from vendors like Apache, Broadcom, and Oracle. With a CVSS score of 9.8 (CRITICAL), it presents a high-impact, easily exploitable threat (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential future exploitation. Users are strongly advised to upgrade to Log4j 2, as Log4j 1.2 reached end-of-life in 2015.

Impacted Technologies

VendorProductVersion(s)CPE
>= 1.2, <= 1.2.17CPE matchmatch criteria
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:broadcom:brocade_sannav:-:*:*:*:*:*:*:*
< 1.2.18.2CPE matchmatch criteria
cpe:2.3:a:qos:reload4j:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
66.54%
Probability of exploitation in next 30 days
EPSS Percentile
99.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.6654 is in the 97th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (197)

oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: EAP 6.4 log4j asyncFixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AMQ Streams 1.6.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AMQ Streams 2.0.1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Data Grid 7.3.9Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 Extended Lifecycle SupportFixed in: log4j-0:1.2.14-6.6.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.3 Advanced Update SupportFixed in: log4j-0:1.2.17-17.el7_3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)Fixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Telco Extended Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Update Services for SAP SolutionsFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Telco Extended Update SupportFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Update Services for SAP SolutionsFixed in: log4j-0:1.2.17-18.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: parfait:0.5-8050020220124063900.6b489b78
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: parfait:0.5-8010020220124232535.d5701770
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: parfait:0.5-8020020220124231008.1c5d4e8a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: parfait:0.5-8040020220124230039.d304d9ed
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Fuse 7.10.1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Fuse/AMQ 6.3.20Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Data Virtualization 6.4.8.SP1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Data Virtualization 6.4.8.SP2Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-apache-cxf-0:3.4.10-1.SP1_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-avro-0:1.7.6-8.redhat_00003.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-h2database-0:1.4.197-3.redhat_00004.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-annotations-api_1.3_spec-0:2.0.1-4.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-server-migration-0:1.7.2-12.Final_redhat_00013.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-xnio-base-0:3.7.13-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-2.Final_redhat_00002.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.3.11-4.GA_redhat_00002.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wss4j-0:2.3.3-2.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-xalan-j2-0:2.7.1-38.redhat_00015.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-xml-security-0:2.2.3-2.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: EAP 6.4.24 release
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-log4j-0:2.17.1-1.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3.1Fixed in: log4j-eap6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-46.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-49.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.23-26.redhat_26.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.4.10Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.5 for RHEL 7Fixed in: rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el7sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.5 for RHEL 8Fixed in: rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el8sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-maven36-log4j12-0:1.2.17-23.4.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: org.ovirt.engine-root-0:4.4.10.6-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: snmp4j-0:3.6.4-0.1.el8ev
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso74-openshift-rhel8:7.4-45
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso74-openj9-openshift-rhel8:7.4-60
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso75-openshift-rhel8:7.5-17
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso7-rhel8-operator-bundle:7.5.1-9
View patch
redhatpatch availablevia redhat_api
Product: RHSSO 7.5.1Fixed in: log4j
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-log4j-0:2.17.1-1.redhat_00001.1.el8eap
View patch
redhatno patchvia redhat_api
Product: Red Hat AMQ Broker 7Fixed in: log4j
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-metering-hadoop
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-metering-hive
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-metering-presto
redhatno patchvia redhat_api
Product: A-MQ Clients 2Fixed in: log4j

Vendor Advisories (2)

mavenGHSA-65fg-84f6-3jq3critical

SQL Injection in Log4j 1.2.x

Jan 21, 2022
redhatCVE-2022-23305Important

log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender

Jan 18, 2022

References

lists.apache.org / thread/pt6lh3pbsvxqlwlp4c5l798dv2hkc85y
Issue TrackingMailing ListVendor Advisory
logging.apache.org / log4j/1.2/index.html
Vendor Advisory
security.netapp.com / advisory/ntap-20220217-0007
Third Party Advisory
oracle.com / security-alerts/cpuapr2022.html
PatchThird Party Advisory
oracle.com / security-alerts/cpujul2022.html
PatchThird Party Advisory
openwall.com / lists/oss-security/2022/01/18/4
Mailing ListThird Party Advisory