Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-r67p-yqg2-9bbq
Summary
Improper Input Validation and Injection in Apache Log4j2
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to an attack where an attacker with permission to modify the logging configuration file can construct a malicious configuration using a JDBC Appender with a data source referencing a JNDI URI which can execute remote code. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.
Aliases
0
alias CVE-2021-44832
1
alias GHSA-8489-44mv-ggj8
Fixed_packages
0
url pkg:deb/debian/apache-log4j2@2.17.1-1~deb11u1?distro=trixie
purl pkg:deb/debian/apache-log4j2@2.17.1-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.17.1-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/apache-log4j2@2.17.1-1~deb11u1
purl pkg:deb/debian/apache-log4j2@2.17.1-1~deb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.17.1-1~deb11u1
2
url pkg:deb/debian/apache-log4j2@2.17.1-1?distro=trixie
purl pkg:deb/debian/apache-log4j2@2.17.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.17.1-1%3Fdistro=trixie
3
url pkg:deb/debian/apache-log4j2@2.19.0-2?distro=trixie
purl pkg:deb/debian/apache-log4j2@2.19.0-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.19.0-2%3Fdistro=trixie
4
url pkg:maven/org.apache.logging.log4j/log4j-core@2.3.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.3.2
5
url pkg:maven/org.apache.logging.log4j/log4j-core@2.12.4
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.12.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.12.4
6
url pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
7
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.2
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gnhu-4afv-pfhy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.2
8
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.9
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gnhu-4afv-pfhy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.9
9
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.13
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.13
10
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.14
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.14
Affected_packages
0
url pkg:deb/debian/apache-log4j2@2.0~beta9-1
purl pkg:deb/debian/apache-log4j2@2.0~beta9-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-8977-tjss-w7ba
2
vulnerability VCID-gcyx-fdns-k3bt
3
vulnerability VCID-jwav-88m7-6fhz
4
vulnerability VCID-mz9r-j78c-dfe3
5
vulnerability VCID-r67p-yqg2-9bbq
6
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.0~beta9-1
1
url pkg:deb/debian/apache-log4j2@2.7-2
purl pkg:deb/debian/apache-log4j2@2.7-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-mz9r-j78c-dfe3
4
vulnerability VCID-r67p-yqg2-9bbq
5
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.7-2
2
url pkg:deb/debian/apache-log4j2@2.17.1-1~deb10u1
purl pkg:deb/debian/apache-log4j2@2.17.1-1~deb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache-log4j2@2.17.1-1~deb10u1
3
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta7
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-khr7-6pza-afab
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta7
4
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta8
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-khr7-6pza-afab
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta8
5
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta9
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-jwav-88m7-6fhz
2
vulnerability VCID-khr7-6pza-afab
3
vulnerability VCID-mz9r-j78c-dfe3
4
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta9
6
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-khr7-6pza-afab
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc1
7
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-khr7-6pza-afab
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc2
8
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0
9
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0.1
10
url pkg:maven/org.apache.logging.log4j/log4j-core@2.0.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.0.2
11
url pkg:maven/org.apache.logging.log4j/log4j-core@2.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.1
12
url pkg:maven/org.apache.logging.log4j/log4j-core@2.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.2
13
url pkg:maven/org.apache.logging.log4j/log4j-core@2.3
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.3
14
url pkg:maven/org.apache.logging.log4j/log4j-core@2.3.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.3.1
15
url pkg:maven/org.apache.logging.log4j/log4j-core@2.4
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-mz9r-j78c-dfe3
4
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.4
16
url pkg:maven/org.apache.logging.log4j/log4j-core@2.4.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.4.1
17
url pkg:maven/org.apache.logging.log4j/log4j-core@2.5
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.5
18
url pkg:maven/org.apache.logging.log4j/log4j-core@2.6
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.6
19
url pkg:maven/org.apache.logging.log4j/log4j-core@2.6.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.6.1
20
url pkg:maven/org.apache.logging.log4j/log4j-core@2.6.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.6.2
21
url pkg:maven/org.apache.logging.log4j/log4j-core@2.7
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.7
22
url pkg:maven/org.apache.logging.log4j/log4j-core@2.8
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.8
23
url pkg:maven/org.apache.logging.log4j/log4j-core@2.8.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-74dr-6hxt-tbgu
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.8.1
24
url pkg:maven/org.apache.logging.log4j/log4j-core@2.8.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.8.2
25
url pkg:maven/org.apache.logging.log4j/log4j-core@2.9.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.9.0
26
url pkg:maven/org.apache.logging.log4j/log4j-core@2.9.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.9.1
27
url pkg:maven/org.apache.logging.log4j/log4j-core@2.10.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.10.0
28
url pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0
29
url pkg:maven/org.apache.logging.log4j/log4j-core@2.11.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.11.1
30
url pkg:maven/org.apache.logging.log4j/log4j-core@2.11.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.11.2
31
url pkg:maven/org.apache.logging.log4j/log4j-core@2.12.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nzu-3a6y-jqab
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-mz9r-j78c-dfe3
3
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.12.0
32
url pkg:maven/org.apache.logging.log4j/log4j-core@2.12.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.12.1
33
url pkg:maven/org.apache.logging.log4j/log4j-core@2.12.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.12.2
34
url pkg:maven/org.apache.logging.log4j/log4j-core@2.12.3
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.12.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.12.3
35
url pkg:maven/org.apache.logging.log4j/log4j-core@2.13.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gcyx-fdns-k3bt
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-mz9r-j78c-dfe3
4
vulnerability VCID-r67p-yqg2-9bbq
5
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.13.0
36
url pkg:maven/org.apache.logging.log4j/log4j-core@2.13.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-mz9r-j78c-dfe3
2
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.13.1
37
url pkg:maven/org.apache.logging.log4j/log4j-core@2.13.2
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.13.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.13.2
38
url pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3
39
url pkg:maven/org.apache.logging.log4j/log4j-core@2.14.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.14.0
40
url pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1
41
url pkg:maven/org.apache.logging.log4j/log4j-core@2.15.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.15.0
42
url pkg:maven/org.apache.logging.log4j/log4j-core@2.16.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.16.0
43
url pkg:maven/org.apache.logging.log4j/log4j-core@2.17.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gcyx-fdns-k3bt
1
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.logging.log4j/log4j-core@2.17.0
44
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.0
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.0
45
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.1
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.1
46
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.2
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.2
47
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.3
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.3
48
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.4
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.4
49
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.5
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.5
50
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.6
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.6
51
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.7
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.8.7
52
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.0
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.0
53
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.1
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.9.1
54
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.0
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.0
55
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.1
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.1
56
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.2
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.2
57
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.3
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.3
58
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.4
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.4
59
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.5
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.5
60
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.6
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.6
61
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.7
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.7
62
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.8
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gnhu-4afv-pfhy
1
vulnerability VCID-r67p-yqg2-9bbq
2
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.8
63
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.0
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.0
64
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.1
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.1
65
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.2
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.2
66
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.3
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.3
67
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.4
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.4
68
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.5
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.5
69
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.6
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.6
70
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.7
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.7
71
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.8
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.8
72
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.9
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.9
73
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.10
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-r67p-yqg2-9bbq
2
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.10
74
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.11
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r67p-yqg2-9bbq
1
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.11
75
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.12
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.12
76
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.0
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.0
77
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.1
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.1
78
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.2
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.2
79
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.3
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.3
80
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.4
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.4
81
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.5
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.5
82
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.6
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.6
83
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.7
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.7
84
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.8
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.8
85
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.9
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.9
86
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.10
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-gnhu-4afv-pfhy
2
vulnerability VCID-jwav-88m7-6fhz
3
vulnerability VCID-r67p-yqg2-9bbq
4
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.10
87
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.11
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-r67p-yqg2-9bbq
2
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.11
88
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.12
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r67p-yqg2-9bbq
1
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.12
89
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.13
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r67p-yqg2-9bbq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.13
90
url pkg:rpm/redhat/eap7-log4j@2.17.1-1.redhat_00001.1?arch=el7eap
purl pkg:rpm/redhat/eap7-log4j@2.17.1-1.redhat_00001.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vfk-arae-ubha
1
vulnerability VCID-698m-2hju-2qcv
2
vulnerability VCID-8977-tjss-w7ba
3
vulnerability VCID-9k99-jzq8-fyge
4
vulnerability VCID-bbq3-tx7c-yucn
5
vulnerability VCID-r67p-yqg2-9bbq
6
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-log4j@2.17.1-1.redhat_00001.1%3Farch=el7eap
91
url pkg:rpm/redhat/eap7-log4j@2.17.1-1.redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap7-log4j@2.17.1-1.redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vfk-arae-ubha
1
vulnerability VCID-698m-2hju-2qcv
2
vulnerability VCID-8977-tjss-w7ba
3
vulnerability VCID-9k99-jzq8-fyge
4
vulnerability VCID-bbq3-tx7c-yucn
5
vulnerability VCID-r67p-yqg2-9bbq
6
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-log4j@2.17.1-1.redhat_00001.1%3Farch=el8eap
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44832.json
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44832.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44832
reference_id
reference_type
scores
0
value 0.50589
scoring_system epss
scoring_elements 0.9785
published_at 2026-04-13T12:55:00Z
1
value 0.53648
scoring_system epss
scoring_elements 0.98
published_at 2026-04-16T12:55:00Z
2
value 0.53648
scoring_system epss
scoring_elements 0.97993
published_at 2026-04-12T12:55:00Z
3
value 0.53648
scoring_system epss
scoring_elements 0.97991
published_at 2026-04-11T12:55:00Z
4
value 0.53648
scoring_system epss
scoring_elements 0.97989
published_at 2026-04-09T12:55:00Z
5
value 0.53648
scoring_system epss
scoring_elements 0.98001
published_at 2026-04-18T12:55:00Z
6
value 0.53648
scoring_system epss
scoring_elements 0.97981
published_at 2026-04-04T12:55:00Z
7
value 0.53648
scoring_system epss
scoring_elements 0.97982
published_at 2026-04-07T12:55:00Z
8
value 0.53648
scoring_system epss
scoring_elements 0.97987
published_at 2026-04-08T12:55:00Z
9
value 0.53648
scoring_system epss
scoring_elements 0.97976
published_at 2026-04-01T12:55:00Z
10
value 0.53648
scoring_system epss
scoring_elements 0.97979
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44832
2
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/apache/logging-log4j2
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/logging-log4j2
6
reference_url https://issues.apache.org/jira/browse/LOG4J2-3293
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/LOG4J2-3293
7
reference_url https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143
8
reference_url https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC
11
reference_url https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
12
reference_url https://security.netapp.com/advisory/ntap-20220104-0001
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220104-0001
13
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuapr2022.html
14
reference_url https://www.oracle.com/security-alerts/cpujan2022.html
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujan2022.html
15
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2022.html
16
reference_url http://www.openwall.com/lists/oss-security/2021/12/28/1
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/12/28/1
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002813
reference_id 1002813
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002813
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2035951
reference_id 2035951
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2035951
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-44832
reference_id CVE-2021-44832
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-44832
20
reference_url https://github.com/advisories/GHSA-8489-44mv-ggj8
reference_id GHSA-8489-44mv-ggj8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8489-44mv-ggj8
21
reference_url https://access.redhat.com/errata/RHSA-2022:0083
reference_id RHSA-2022:0083
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0083
22
reference_url https://access.redhat.com/errata/RHSA-2022:0138
reference_id RHSA-2022:0138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0138
23
reference_url https://access.redhat.com/errata/RHSA-2022:0181
reference_id RHSA-2022:0181
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0181
24
reference_url https://access.redhat.com/errata/RHSA-2022:0203
reference_id RHSA-2022:0203
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0203
25
reference_url https://access.redhat.com/errata/RHSA-2022:0205
reference_id RHSA-2022:0205
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0205
26
reference_url https://access.redhat.com/errata/RHSA-2022:0216
reference_id RHSA-2022:0216
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0216
27
reference_url https://access.redhat.com/errata/RHSA-2022:0222
reference_id RHSA-2022:0222
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0222
28
reference_url https://access.redhat.com/errata/RHSA-2022:0223
reference_id RHSA-2022:0223
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0223
29
reference_url https://access.redhat.com/errata/RHSA-2022:0225
reference_id RHSA-2022:0225
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0225
30
reference_url https://access.redhat.com/errata/RHSA-2022:0226
reference_id RHSA-2022:0226
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0226
31
reference_url https://access.redhat.com/errata/RHSA-2022:0227
reference_id RHSA-2022:0227
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0227
32
reference_url https://access.redhat.com/errata/RHSA-2022:0230
reference_id RHSA-2022:0230
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0230
33
reference_url https://access.redhat.com/errata/RHSA-2022:0236
reference_id RHSA-2022:0236
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0236
34
reference_url https://access.redhat.com/errata/RHSA-2022:0467
reference_id RHSA-2022:0467
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0467
35
reference_url https://access.redhat.com/errata/RHSA-2022:0485
reference_id RHSA-2022:0485
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0485
36
reference_url https://access.redhat.com/errata/RHSA-2022:0493
reference_id RHSA-2022:0493
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0493
37
reference_url https://access.redhat.com/errata/RHSA-2022:1296
reference_id RHSA-2022:1296
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1296
38
reference_url https://access.redhat.com/errata/RHSA-2022:1297
reference_id RHSA-2022:1297
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1297
39
reference_url https://access.redhat.com/errata/RHSA-2022:1299
reference_id RHSA-2022:1299
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1299
40
reference_url https://usn.ubuntu.com/5222-1/
reference_id USN-5222-1
reference_type
scores
url https://usn.ubuntu.com/5222-1/
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
1
cwe_id 74
name Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
description The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
4
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-r67p-yqg2-9bbq