Product by Apache Software Foundation

    Apache Log4j 1.x

    4 known vulnerabilities in Apache Log4j 1.x (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Log4j 1.x (Apache Software Foundation)
    CriticalCVE-2022-23305

    SQL injection in JDBC Appender in Apache Log4j V1

    also in 29 other products

    		9.8
    HighCVE-2022-23302

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    also in 27 other products

    		8.8
    HighCVE-2022-23307

    Apache Log4j 1.x: Deserialization of Untrusted Data

    also in 26 other products

    		8.8
    HighCVE-2021-4104

    Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

    also in 45 other products

    		7.5

    All products by Apache Software Foundation