Known vulnerabilities in Apache Software Foundation Apache Log4j
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-26464 | ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than… | Not rated | Mar 10, 2023 |
| CVE-2021-45046 | Exploited Apache Log4j2 Deserialization of Untrusted Data Vulnerability | Not rated | Dec 14, 2021 |
| CVE-2017-5645 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events… | Not rated | Apr 17, 2017 |