Vendor

    Qos

    10 known vulnerabilities in products by Qos, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Qos
    CriticalCVE-2022-23305

    SQL injection in JDBC Appender in Apache Log4j V1

    also in 29 other products

    		9.8
    CriticalCVE-2018-8088

    Qos Slf4j: security vulnerability

    also in 12 other products

    		9.8
    HighCVE-2022-23302

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    also in 27 other products

    		8.8
    HighCVE-2022-23307

    Apache Log4j 1.x: Deserialization of Untrusted Data

    also in 26 other products

    		8.8
    CriticalCVE-2017-5929

    Qos Logback: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2020-9493

    Java deserialization in Chainsaw

    also in 3 other products

    		9.8
    MediumCVE-2021-42550

    RCE from attacker with configuration edit priviledges through JNDI lookup

    also in 5 other products

    		6.6
    LowCVE-2020-9488

    Apache Log4j: security vulnerability

    also in 44 other products

    		3.7
    HighCVE-2023-6378

    Logback "receiver" DOS vulnerability

    		7.1
    HighCVE-2023-6481

    Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

    		7.1

    News

    Products

    Products by Qos
    Reload4j50
    Logback40