log4j vulnerabilities (TuxCare)
7 vulnerabilities.
-
log4jTuxCare Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson() 6.3 Medium -
log4jTuxCare Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters 6.9 Medium -
log4jTuxCare A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
log4jTuxCare SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
log4jTuxCare Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
log4jTuxCare Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
log4jTuxCare Deserialization of Untrusted Data in Log4j 9.8 Critical