ant-apache-log4j vulnerabilities (Red Hat)

11 vulnerabilities.

• ant-apache-log4j Red Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 Fix available 8.8 HighMarch 25, 2026
• ant-apache-log4j Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Public exploitFix available 8.8 HighMay 28, 2025
• ant-apache-log4j Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• ant-apache-log4j Red Hat The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node... CVE-2012-4557 Fix available EPSS 17.5% 5.0 MediumNovember 30, 2012
• ant-apache-log4j Red Hat Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache... CVE-2011-0419 Public exploitFix available EPSS 30.4% 4.3 MediumMay 15, 2011
• ant-apache-log4j Red Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2011-0013 Fix available EPSS 10.0% 4.3 MediumFebruary 13, 2011
• ant-apache-log4j Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2010-3718 Fix available 1.2 LowFebruary 10, 2011
• ant-apache-log4j Red Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2010-4172 Public exploitFix available EPSS 42.0% 4.3 MediumNovember 26, 2010
• ant-apache-log4j Red Hat Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache... CVE-2010-1623 Fix available EPSS 20.3% 5.0 MediumOctober 4, 2010
• ant-apache-log4j Red Hat The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow... CVE-2010-1452 Fix available EPSS 21.4% 5.0 MediumJuly 28, 2010
• ant-apache-log4j Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2010-1157 Public exploitFix available EPSS 52.5% 2.6 LowApril 23, 2010