org.apache.logging.log4j:log4j-1.2-api vulnerabilities (TuxCare)
8 vulnerabilities.
org.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()6.3 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout6.3 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters6.9 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters6.9 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility6.9 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass6.3 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j Core: Missing TLS hostname verification in Socket appender6.3 Mediumorg.apache.logging.log4j:log4j-1.2-apiTuxCareApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Critical