log4j-eap6 vulnerabilities (Red Hat)

24 vulnerabilities.

• log4j-eap6 Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• log4j-eap6 Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• log4j-eap6 Red Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• log4j-eap6 Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• log4j-eap6 Red Hat Deserialization of Untrusted Data in Log4j CVE-2019-17571 Public exploitFix available EPSS 70.0% 9.8 CriticalDecember 20, 2019
• log4j-eap6 Red Hat jackson-databind is vulnerable to a deserialization flaw CVE-2017-7525 Public exploitFix available EPSS 37.7% 9.8 CriticalAugust 11, 2017
• log4j-eap6 Red Hat Insufficient Verification of Data Authenticity in Apache Tomcat CVE-2017-7674 Fix available 4.3 MediumAugust 10, 2017
• log4j-eap6 Red Hat Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5664 Fix available EPSS 16.6% 7.5 HighJune 6, 2017
• log4j-eap6 Red Hat Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• log4j-eap6 Red Hat Exposure of Resource to Wrong Sphere in Apache Tomcat CVE-2017-5648 Fix available EPSS 13.2% 9.1 CriticalApril 17, 2017
• log4j-eap6 Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-5647 Fix available EPSS 16.8% 7.5 HighApril 17, 2017
• log4j-eap6 Red Hat A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... CVE-2016-7056 Fix available 5.5 MediumDecember 31, 2016
• log4j-eap6 Red Hat A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... CVE-2016-8610 Public exploitFix available EPSS 39.9% 7.5 HighOctober 24, 2016
• log4j-eap6 Red Hat Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... CVE-2016-6304 Fix available EPSS 63.0% 7.5 HighSeptember 22, 2016
• log4j-eap6 Red Hat Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2... CVE-2015-0298 Fix available 4.3 MediumAugust 24, 2015
• log4j-eap6 Red Hat Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass CVE-2012-4550 5.3 MediumJanuary 5, 2013
• log4j-eap6 Red Hat Jboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization CVE-2012-4549 6.5 MediumJanuary 5, 2013
• log4j-eap6 Red Hat Improper Authentication in Apache CXF CVE-2012-2378 Fix available 4.3 MediumJanuary 5, 2013
• log4j-eap6 Red Hat XML Signature/Encryption Not Validated in Apache CXF CVE-2012-2379 Fix available 10.0 HighJanuary 3, 2013
• log4j-eap6 Red Hat User confusion in IronJacamar CVE-2012-3428 Fix available 4.3 MediumDecember 20, 2012
• log4j-eap6 Red Hat Remote web-service operation execution in Apache CXF CVE-2012-3451 Fix available 4.3 MediumSeptember 24, 2012
• log4j-eap6 Red Hat Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in... CVE-2012-2687 Fix available EPSS 23.1% 2.6 LowAugust 22, 2012
• log4j-eap6 Red Hat Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,... CVE-2012-2672 Fix available 2.1 LowJune 17, 2012
• log4j-eap6 Red Hat Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server... CVE-2008-0455 Public exploitFix available EPSS 64.9% 4.3 MediumJanuary 25, 2008