Qos vulnerabilities

Products

• Reload4j 5
• Logback 4

Newest

• qos logback Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix CVE-2023-6481 Fix available 7.1 HighDecember 4, 2023
• qos logback Logback "receiver" DOS vulnerability CVE-2023-6378 Fix available 7.1 HighNovember 29, 2023
• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• qos logback, netapp cloud manager, service level manager +3 more +5 more RCE from attacker with configuration edit priviledges through JNDI lookup CVE-2021-42550 Fix available 6.6 MediumDecember 16, 2021
• apache chainsaw, log4j, qos reload4j +2 more Java deserialization in Chainsaw CVE-2020-9493 Fix available 9.8 CriticalJune 16, 2021
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 more Improper Access Control in SLF4J CVE-2018-8088 Fix available EPSS 14.7% 9.8 CriticalMarch 20, 2018
• qos logback, redhat satellite, satellite capsule +2 more QOS.ch Logback vulnerable to Deserialization of Untrusted Data CVE-2017-5929 Fix available 9.8 CriticalMarch 13, 2017