Product · Apache Software Foundation

Log4j

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2019-17571 Public exploit EPSS 70%

Deserialization of Untrusted Data in Log4j

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log dat…

Apache Software Foundation Log4j apache-log4j1.2 apache-log4j1.2 Debian Ubuntu Maven

Dec 20, 2019