Product · Apache Software Foundation

Apache Log4j

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2023-26464

Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender

** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on wh…

Apache Software Foundation Apache Log4j org.apache.logging.log4j:log4j-core apache-log4j1.2 Ubuntu Maven

Mar 10, 2023