org.apache.logging.log4j:log4j vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.logging.log4j:log4j Maven Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• org.apache.logging.log4j:log4j Maven Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017