Package · Ubuntu

apache-log4j1.2

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2021-4104 Public exploit EPSS 81%

Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to pe…

Apache Software Foundation Apache Log4j 1.x apache-log4j1.2 apache-log4j1.2 Debian Ubuntu Maven

Dec 14, 2021