{"id":"CVE-2020-9488","aliases":["DEBIAN-CVE-2020-9488","DLA-2852-1","EUVD-2020-0518","GHSA-vwqq-5vrc-xw9h","RHSA-2020:3817","UBUNTU-CVE-2020-9488","openSUSE-SU-2024:11025-1"],"status":"published","title":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.08216,"percentile":0.94923,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-295"],"published":"2020-04-27T15:36:10Z","modified":"2026-11-06T13:49:14Z","exploits":[{"source":"pocgithub","id":"arsalanraja987/java-log4j-cve-2020-9488","title":"arsalanraja987/java-log4j-cve-2020-9488","date":"2025-07-07","url":"https://github.com/arsalanraja987/java-log4j-cve-2020-9488"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","fixed_in":["2.13.2","2.12.3","2.3.2"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","fixed_in":["2.13.2","2.12.3","2.3.2"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"apache-log4j2","fixed_in":["2.13.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache-log4j2","fixed_in":["2.13.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache-log4j2","fixed_in":["2.13.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"apache-log4j2","fixed_in":["2.16.0-0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.12.3"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.12.3"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apache-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"apache-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.3-0+deb9u1"}]}],"versions":["2.10.0-1","2.10.0-2","2.11.1-1","2.11.1-2","2.11.2-1","2.7-2","2.7-2+deb9u1","2.8.2-1","2.8.2-2"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.2"}]}],"versions":["2.13.0","2.13.1"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.2"}]}],"versions":["2.13.0","2.13.1"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.12.3"}]}],"versions":["2.10.0","2.11.0","2.11.1","2.11.2","2.12.0","2.12.1","2.12.2","2.4","2.4.1","2.5","2.6","2.6.1","2.6.2","2.7","2.8","2.8.1","2.8.2","2.9.0","2.9.1"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2"}]}],"versions":["2.0","2.0-alpha1","2.0-alpha2","2.0-beta1","2.0-beta2","2.0-beta3","2.0-beta4","2.0-beta5","2.0-beta6","2.0-beta7","2.0-beta8","2.0-beta9","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.1","2.2","2.3","2.3.1"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.12.3"}]}],"versions":["2.10.0","2.11.0","2.11.1","2.11.2","2.12.0","2.12.1","2.12.2","2.4","2.4.1","2.5","2.6","2.6.1","2.6.2","2.7","2.8","2.8.1","2.8.2","2.9.0","2.9.1"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.logging.log4j:log4j-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2"}]}],"versions":["2.0","2.0-alpha1","2.0-alpha2","2.0-beta1","2.0-beta2","2.0-beta3","2.0-beta4","2.0-beta5","2.0-beta6","2.0-beta7","2.0-beta8","2.0-beta9","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.1","2.2","2.3","2.3.1"]},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"python-qpid-proton-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el6_10amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el6_10amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el6_10amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-cpp-client-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el6_10amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el6_10amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-c-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-cpp-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el6","package":"qpid-proton-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-1.el6_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"python-qpid-proton-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el7amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el7amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el7amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-cpp-client-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el7amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.0-31.el7amq"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-c-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-cpp-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"qpid-proton-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el7","package":"rubygem-qpid_proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"nodejs-rhea","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.24-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"python-qpid-proton-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"python3-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"python3-qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-c-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-cpp-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"qpid-proton-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"rubygem-qpid_proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:a_mq_clients:2::el8","package":"rubygem-qpid_proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2-1","2.4-1","2.4-2","2.4-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-0.20.04.1"}]}],"versions":["2.11.1-2","2.11.2-1","2.15.0-0.20.04.1"]}],"products":[{"vendor":"apache","product":"apache log4j"},{"vendor":"apache","product":"log4j"},{"vendor":"apache software foundation","product":"apache log4j"},{"vendor":"debian","product":"debian_linux"},{"vendor":"oracle","product":"communications_application_session_controller"},{"vendor":"oracle","product":"communications_billing_and_revenue_management"},{"vendor":"oracle","product":"communications_eagle_ftp_table_base_retrieval"},{"vendor":"oracle","product":"communications_offline_mediation_controller"},{"vendor":"oracle","product":"communications_services_gatekeeper"},{"vendor":"oracle","product":"communications_unified_inventory_management"},{"vendor":"oracle","product":"data_integrator"},{"vendor":"oracle","product":"enterprise_manager_for_peoplesoft"},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure"},{"vendor":"oracle","product":"financial_services_institutional_performance_analytics"},{"vendor":"oracle","product":"financial_services_market_risk_measurement_and_management"},{"vendor":"oracle","product":"financial_services_price_creation_and_discovery"},{"vendor":"oracle","product":"financial_services_retail_customer_analytics"},{"vendor":"oracle","product":"flexcube_core_banking"},{"vendor":"oracle","product":"flexcube_private_banking"},{"vendor":"oracle","product":"health_sciences_information_manager"},{"vendor":"oracle","product":"insurance_insbridge_rating_and_underwriting"},{"vendor":"oracle","product":"insurance_policy_administration_j2ee"},{"vendor":"oracle","product":"insurance_rules_palette"},{"vendor":"oracle","product":"jd_edwards_world_security"},{"vendor":"oracle","product":"oracle_goldengate_application_adapters"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"policy_automation"},{"vendor":"oracle","product":"policy_automation_connector_for_siebel"},{"vendor":"oracle","product":"policy_automation_for_mobile_devices"},{"vendor":"oracle","product":"primavera_unifier"},{"vendor":"oracle","product":"retail_advanced_inventory_planning"},{"vendor":"oracle","product":"retail_assortment_planning"},{"vendor":"oracle","product":"retail_bulk_data_integration"},{"vendor":"oracle","product":"retail_customer_management_and_segmentation_foundation"},{"vendor":"oracle","product":"retail_eftlink"},{"vendor":"oracle","product":"retail_insights_cloud_service_suite"},{"vendor":"oracle","product":"retail_integration_bus"},{"vendor":"oracle","product":"retail_order_broker_cloud_service"},{"vendor":"oracle","product":"retail_predictive_application_server"},{"vendor":"oracle","product":"retail_xstore_point_of_service"},{"vendor":"oracle","product":"siebel_apps_-_marketing"},{"vendor":"oracle","product":"siebel_ui_framework"},{"vendor":"oracle","product":"spatial_and_graph"},{"vendor":"oracle","product":"storagetek_acsls"},{"vendor":"oracle","product":"storagetek_tape_analytics_sw_tool"},{"vendor":"oracle","product":"utilities_framework"},{"vendor":"oracle","product":"weblogic_server"},{"vendor":"qos","product":"reload4j"}],"references":[{"url":"https://lists.apache.org/thread.html/r8c001b9a95c0bbec06f4457721edd94935a55932e64b82cc5582b846%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2f209d271349bafd91537a558a279c08ebcff8fa3e547357d58833e6%40%3Cdev.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r7641ee788e1eb1be4bb206a7d15f8a64ec6ef23e5ec6132d5a567695%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd8e87c4d69df335d0ba7d815b63be8bd8a6352f429765c52eb07ddac%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r4285398e5585a0456d3d9db021a4fce6e6fcf3ec027dfa13a450ec98%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r0df3d7a5acb98c57e64ab9266aa21eeee1d9b399addb96f9cf1cbe05%40%3Cdev.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r7e739f2961753af95e2a3a637828fb88bfca68e5d6b0221d483a9ee5%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9a79175c393d14d760a0ae3731b4a873230a16ef321aa9ca48a810cd%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3%40%3Ccommits.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rec34b1cccf907898e7cb36051ffac3ccf1ea89d0b261a2a3b3fb267f%40%3Ccommits.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r48efc7cb5aeb4e1f67aaa06fb4b5479a5635d12f07d0b93fc2d08809%40%3Ccommits.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf1c2a81a08034c688b8f15cf58a4cfab322d00002ca46d20133bee20%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r0a2699f724156a558afd1abb6c044fb9132caa66dce861b82699722a%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r48bcd06049c1779ef709564544c3d8a32ae6ee5c3b7281a606ac4463%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://issues.apache.org/jira/browse/LOG4J2-2819","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mitigation","Patch","Vendor Advisory","fix","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200504-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r393943de452406f0f6f4b3def9f8d3c071f96323c1f6ed1a098f7fe4%40%3Ctorque-dev.db.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/r1fc73f0e16ec2fa249d3ad39a5194afb9cc5afb4c023dc0bab5a5881%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra632b329b2ae2324fabbad5da204c4ec2e171ff60348ec4ba698fd40%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r4ed1f49616a8603832d378cb9d13e7a8b9b27972bb46d946ccd8491f%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r4db540cafc5d7232c62e076051ef661d37d345015b2e59b3f81a932f%40%3Cdev.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9776e71e3c67c5d13a91c1eba0dc025b48b802eb7561cc6956d6961c%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r65578f3761a89bc164e8964acd5d913b9f8fd997967b195a89a97ca3%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/re024d86dffa72ad800f2848d0c77ed93f0b78ee808350b477a6ed987%40%3Cgitbox.hive.apache.org%3E","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3%40%3Ctorque-dev.db.apache.org%3E","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r3d1d00441c55144a4013adda74b051ae7864128ebcfb6ee9721a2eb3%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a%40%3Ctorque-dev.db.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604%40%3Ctorque-dev.db.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r33864a0fc171c1c4bf680645ebb6d4f8057899ab294a43e1e4fe9d04%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r4d5dc9f3520071338d9ebc26f9f158a43ae28a91923d176b550a807b%40%3Cdev.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r22a56beb76dd8cf18e24fda9072f1e05990f49d6439662d3782a392f%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5a68258e5ab12532dc179edae3d6e87037fa3b50ab9d63a90c432507%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra051e07a0eea4943fa104247e69596f094951f51512d42c924e86c75%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r45916179811a32cbaa500f972de9098e6ee80ee81c7f134fce83e03a%40%3Cissues.flink.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.debian.org/security/2021/dsa-5020","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00017.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9488","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r0a2699f724156a558afd1abb6c044fb9132caa66dce861b82699722a@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r0df3d7a5acb98c57e64ab9266aa21eeee1d9b399addb96f9cf1cbe05@%3Cdev.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2f209d271349bafd91537a558a279c08ebcff8fa3e547357d58833e6@%3Cdev.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4285398e5585a0456d3d9db021a4fce6e6fcf3ec027dfa13a450ec98@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r48bcd06049c1779ef709564544c3d8a32ae6ee5c3b7281a606ac4463@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r48efc7cb5aeb4e1f67aaa06fb4b5479a5635d12f07d0b93fc2d08809@%3Ccommits.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7641ee788e1eb1be4bb206a7d15f8a64ec6ef23e5ec6132d5a567695@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7e739f2961753af95e2a3a637828fb88bfca68e5d6b0221d483a9ee5@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8c001b9a95c0bbec06f4457721edd94935a55932e64b82cc5582b846@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9a79175c393d14d760a0ae3731b4a873230a16ef321aa9ca48a810cd@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3@%3Ccommits.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd8e87c4d69df335d0ba7d815b63be8bd8a6352f429765c52eb07ddac@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rec34b1cccf907898e7cb36051ffac3ccf1ea89d0b261a2a3b3fb267f@%3Ccommits.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf1c2a81a08034c688b8f15cf58a4cfab322d00002ca46d20133bee20@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r393943de452406f0f6f4b3def9f8d3c071f96323c1f6ed1a098f7fe4@%3Ctorque-dev.db.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1fc73f0e16ec2fa249d3ad39a5194afb9cc5afb4c023dc0bab5a5881@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4db540cafc5d7232c62e076051ef661d37d345015b2e59b3f81a932f@%3Cdev.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4ed1f49616a8603832d378cb9d13e7a8b9b27972bb46d946ccd8491f@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r65578f3761a89bc164e8964acd5d913b9f8fd997967b195a89a97ca3@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9776e71e3c67c5d13a91c1eba0dc025b48b802eb7561cc6956d6961c@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra632b329b2ae2324fabbad5da204c4ec2e171ff60348ec4ba698fd40@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re024d86dffa72ad800f2848d0c77ed93f0b78ee808350b477a6ed987@%3Cgitbox.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r22a56beb76dd8cf18e24fda9072f1e05990f49d6439662d3782a392f@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r33864a0fc171c1c4bf680645ebb6d4f8057899ab294a43e1e4fe9d04@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3d1d00441c55144a4013adda74b051ae7864128ebcfb6ee9721a2eb3@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r45916179811a32cbaa500f972de9098e6ee80ee81c7f134fce83e03a@%3Cissues.flink.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4d5dc9f3520071338d9ebc26f9f158a43ae28a91923d176b550a807b@%3Cdev.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5a68258e5ab12532dc179edae3d6e87037fa3b50ab9d63a90c432507@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra051e07a0eea4943fa104247e69596f094951f51512d42c924e86c75@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20200504-0003","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vwqq-5vrc-xw9h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-9488","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3817","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_amq","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853595","tags":["report"]},{"url":"https://issues.redhat.com/browse/ENTMQCL-1987","tags":["article"]},{"url":"https://issues.redhat.com/browse/ENTMQCL-1988","tags":["article"]},{"url":"https://issues.redhat.com/browse/ENTMQCL-2070","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3817.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9488","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11113","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11113","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/2670","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14307","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-9488","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/04/25/1","tags":["report"]},{"url":"https://gitbox.apache.org/repos/asf?p=logging-log4j2.git;h=6851b5083ef9610bae320bf07e1f24d2aa08851b","tags":["report"]},{"url":"https://gitbox.apache.org/repos/asf?p=logging-log4j2.git;h=fb91a3d71e2f3dadad6fd1beb2ab857f44fe8bbb","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9488","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-9488","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","status":"published","published":"2020-04-27T15:36:10Z","modified":"2026-05-29T16:07:52.931Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:35:49.879248Z"}],"euvd":[{"id":"EUVD-2020-0518","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","status":"published","published":"2020-04-27T15:36:10Z","modified":"2026-05-29T16:07:52Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T18:21:00.772434Z"}],"ghsa":[{"id":"GHSA-vwqq-5vrc-xw9h","title":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender.","status":"published","published":"2020-06-05T14:15:51Z","modified":"2026-06-09T10:30:10Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:40:22.540562Z"}],"nvd":[{"id":"CVE-2020-9488","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","status":"published","published":"2020-04-27T16:15:12.897Z","modified":"2026-06-17T03:28:02.483Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:05:59.718774Z"}],"osv":[{"id":"CVE-2020-9488","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","status":"published","published":"2020-04-27T16:15:12.897Z","modified":"2026-10-24T10:30:58.77680663Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-9488","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","status":"published","published":"2020-04-27T16:15:12.897Z","modified":"2026-10-26T12:02:09.995114261Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"GHSA-vwqq-5vrc-xw9h","title":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender.","status":"published","published":"2020-06-05T14:15:51Z","modified":"2026-06-09T10:45:14.190237393Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:46:57.694388Z"},{"id":"RHSA-2020:3817","title":"Red Hat Security Advisory: AMQ Clients 2.8.0 Release","status":"published","published":"2024-09-20T13:57:32Z","modified":"2026-08-05T10:07:44Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-9488","description":"Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","status":"published","published":"2020-04-27T16:15:00Z","modified":"2026-11-06T13:49:14.542164069Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-06T14:21:56.888881Z"},{"id":"DLA-2852-1","title":"apache-log4j2 - security update","status":"published","published":"2021-12-26T00:00:00Z","modified":"2026-03-09T01:21:05.41283Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2024:11025-1","title":"log4j-2.13.2-1.9 on GA media","description":"These are all security issues fixed in the log4j-2.13.2-1.9 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:10.363635Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}