| CVE-2022-23307 |
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
|
Not rated
|
Jan 18, 2022 |
| CVE-2022-23305 |
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to…
|
Not rated
|
Jan 18, 2022 |
| CVE-2022-23302 |
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write…
|
Not rated
|
Jan 18, 2022 |
| CVE-2021-4104 |
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the…
|
7.5
High
|
Dec 14, 2021 |