log4j:log4j vulnerabilities (Maven)

6 vulnerabilities.

• log4j:log4j Maven Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender CVE-2023-26464 Fix available 7.5 HighMarch 10, 2023
• log4j:log4j Maven A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• log4j:log4j Maven SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• log4j:log4j Maven Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• log4j:log4j Maven Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• log4j:log4j Maven Deserialization of Untrusted Data in Log4j CVE-2019-17571 Public exploitFix available EPSS 70.0% 9.8 CriticalDecember 20, 2019