logstash vulnerabilities (SUSE)

7 vulnerabilities.

• logstash SUSE A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• logstash SUSE SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• logstash SUSE Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• logstash SUSE Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• logstash SUSE Improper Control of Generation of Code in Apache Kafka CVE-2018-1288 Fix available 5.4 MediumJuly 26, 2018
• logstash SUSE Grafana Cross-site Scripting (XSS) CVE-2018-12099 Fix available 6.1 MediumJune 11, 2018
• logstash SUSE When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2... CVE-2018-3817 6.5 MediumMarch 30, 2018