| CVE-2022-23307 |
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
|
Non notée
|
18 janv. 2022 |
| CVE-2022-23305 |
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to…
|
Non notée
|
18 janv. 2022 |
| CVE-2022-23302 |
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write…
|
Non notée
|
18 janv. 2022 |
| CVE-2021-4104 |
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the…
|
7.5
Élevée
|
14 déc. 2021 |