Apache Log4j Vulnérabilités

Chronologie

Version

2.14.02
2.14.12
2.8.02
2.8.12
1.22

Contre-mesures

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Exploitabilité

High2
Functional0
Proof-of-Concept2
Unproven0
Not Defined6

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent0
Network10

Authentification

Not Defined0
High0
Low2
None8

Interaction de l'utilisateur

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤60
≤72
≤80
≤96
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤50
≤60
≤72
≤80
≤96
≤100

VulDB

≤10
≤20
≤30
≤42
≤50
≤62
≤70
≤84
≤92
≤100

NVD

≤10
≤20
≤30
≤42
≤50
≤60
≤70
≤82
≤90
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k0
<10k4
<25k4
<50k2
<100k0
≥100k0

Exploiter aujourd'hui

<1k6
<2k0
<5k2
<10k2
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (29): 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.8.1, 2.9, 2.10, 2.11, 2.12, 2.12.1, 2.12.2, 2.13, 2.14, 2.14.1, 2.15, 2.16, 2.17

Link to Product Website: https://www.apache.org/

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
10/03/20235.55.4Apache Log4j Chainsaw/SocketAppender dénie de service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-26464
18/01/20226.36.0Apache Log4j JMSSink elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-23302
29/12/20216.46.3Apache Log4j Logging Configuration File elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-44832
18/12/20216.46.1Apache Log4j Lookup dénie de service$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2021-45105
14/12/20214.54.4Apache Log4j Incomplete Fix CVE-2021-44228 elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-45046
14/12/20218.88.4Apache Log4j JMSAppender elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-4104
10/12/20218.68.5Apache log4j JNDI LDAP Server Lookup Log4Shell/LogJam elévation de privilèges$25k-$100k$0-$5kHighOfficial Fix0.04CVE-2021-44228
27/04/20203.73.7Apache Log4j SMTP Appender SMTPS authentification faible$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2020-9488
17/04/20178.58.4Apache Log4j Socket Server elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2017-5645

plus d'entrées par Apache

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!