CVSS 5.9 · Medium EPSS 100,0%
Kerentanan Improper Input Validation pada apache log4j, netapp cloud manager +46 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | log4j | Versi 2.0 hingga sebelum 2.3.1 |
| apache | log4j | Versi 2.4 hingga sebelum 2.12.3 |
| apache | log4j | Versi 2.13.0 hingga 2.16.0 |
| netapp | cloud manager | Semua versi |
| debian | debian linux | Versi 10.0 |
| debian | debian linux | Versi 11.0 |
| sonicwall | email security | Semua versi hingga 10.0.12 |
| sonicwall | network security manager | Versi 2.0 hingga sebelum 3.0 |
| sonicwall | web application firewall | Versi 3.0.0 hingga sebelum 3.1.0 |
| sonicwall | 6bk1602-0aa12-0tp0 firmware | Semua versi sebelum 2.7.0 |
| sonicwall | 6bk1602-0aa22-0tp0 firmware | Semua versi sebelum 2.7.0 |
| sonicwall | 6bk1602-0aa32-0tp0 firmware | Semua versi sebelum 2.7.0 |
| sonicwall | 6bk1602-0aa42-0tp0 firmware | Semua versi sebelum 2.7.0 |
| sonicwall | 6bk1602-0aa52-0tp0 firmware | Semua versi sebelum 2.7.0 |
| oracle | agile engineering data management | Versi 6.2.1.0 |
| oracle | agile plm mcad connector | Versi 3.6 |
| oracle | agile product lifecycle management | Versi 9.3.6 |
| oracle | autovue for agile product lifecycle management | Versi 21.0.2 |
| oracle | banking deposits and lines of credit servicing | Versi 2.12.0 |
| oracle | banking enterprise default management | Versi 2.7.1 |
| oracle | banking enterprise default management | Versi 2.12.0 |
| oracle | banking loans servicing | Versi 2.12.0 |
| oracle | banking party management | Versi 2.7.0 |
| oracle | banking payments | Versi 14.5 |
| oracle | banking platform | Versi 2.6.2 |
| oracle | banking platform | Versi 2.7.1 |
| oracle | banking platform | Versi 2.12.0 |
| oracle | banking trade finance | Versi 14.5 |
| oracle | banking treasury management | Versi 14.5 |
| oracle | business intelligence | Versi 5.5.0.0.0 |
| oracle | communications asap | Versi 7.3 |
| oracle | communications billing and revenue management | Versi 12.0.0.4 |
| oracle | communications billing and revenue management | Versi 12.0.0.5 |
| oracle | communications cloud native core console | Versi 1.9.0 |
| oracle | communications cloud native core network function cloud native environment | Versi 1.10.0 |
| oracle | communications cloud native core network repository function | Versi 1.15.0 |
| oracle | communications cloud native core network repository function | Versi 1.15.1 |
| oracle | communications cloud native core network slice selection function | Versi 1.8.0 |
| oracle | communications cloud native core policy | Versi 1.15.0 |
| oracle | communications cloud native core security edge protection proxy | Versi 1.7.0 |
| oracle | communications cloud native core service communication proxy | Versi 1.15.0 |
| oracle | communications cloud native core unified data repository | Versi 1.15.0 |
| oracle | communications convergence | Versi 3.0.2.2.0 |
| oracle | communications convergence | Versi 3.0.3.0 |
| oracle | communications convergent charging controller | Versi 12.0.1.0.0 hingga 12.0.4.0.0 |
| oracle | communications convergent charging controller | Versi 6.0.1.0.0 |
| oracle | communications diameter signaling router | Versi 8.3.0.0 hingga 8.5.1.0 |
| oracle | communications eagle element management system | Versi 46.6 |
| oracle | communications eagle ftp table base retrieval | Versi 4.5 |
| oracle | communications element manager | Semua versi sebelum 9.0 |
| oracle | communications evolved communications application server | Versi 7.1 |
| oracle | communications interactive session recorder | Versi 6.3 |
| oracle | communications interactive session recorder | Versi 6.4 |
| oracle | communications ip service activator | Versi 7.4.0 |
| oracle | communications messaging server | Versi 8.1 |
| oracle | communications network charging and control | Versi 12.0.1.0.0 hingga 12.0.4.0.0 |
| oracle | communications network charging and control | Versi 6.0.1.0.0 |
| oracle | communications network integrity | Versi 7.3.6 |
| oracle | communications performance intelligence center | Versi 10.4.0.3 |
| oracle | communications pricing design center | Versi 12.0.0.4 |