CVE-2021-44228 (Log4Shell)

Warnung

Medienbericht

Exploit

EPSS 100%
Veröffentlicht 10.12.2021 10:15:09
Zuletzt bearbeitet 11.08.2026 19:33:44
Erkennungen
Login

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Betroffene Produkte Warnungen 2 Metriken 4 CWE 4 Referenzen 56

NVD 272 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Siemens ≫ 6bk1602-0aa12-0tp0 Firmware Version < 2.7.0

Siemens ≫ 6bk1602-0aa12-0tp0 Version -

Siemens ≫ 6bk1602-0aa22-0tp0 Firmware Version < 2.7.0

Siemens ≫ 6bk1602-0aa22-0tp0 Version -

Siemens ≫ 6bk1602-0aa32-0tp0 Firmware Version < 2.7.0

Siemens ≫ 6bk1602-0aa32-0tp0 Version -

Siemens ≫ 6bk1602-0aa42-0tp0 Firmware Version < 2.7.0

Siemens ≫ 6bk1602-0aa42-0tp0 Version -

Siemens ≫ 6bk1602-0aa52-0tp0 Firmware Version < 2.7.0

Siemens ≫ 6bk1602-0aa52-0tp0 Version -

Apache ≫ Log4j Version >= 2.0.1 < 2.3.1

Apache ≫ Log4j Version >= 2.4.0 < 2.12.2

Apache ≫ Log4j Version >= 2.13.0 < 2.15.0

Apache ≫ Log4j Version 2.0 Update -

Apache ≫ Log4j Version 2.0 Update beta9

Apache ≫ Log4j Version 2.0 Update rc1

Apache ≫ Log4j Version 2.0 Update rc2

Siemens ≫ Sppa-t3000 Ses3000 Firmware

Siemens ≫ Sppa-t3000 Ses3000 Version -

Siemens ≫ Capital Version < 2019.1

Siemens ≫ Capital Version 2019.1 Update -

Siemens ≫ Capital Version 2019.1 Update sp1912

Siemens ≫ Comos Version < 10.4.2

Siemens ≫ Desigo Cc Advanced Reports Version 3.0

Siemens ≫ Desigo Cc Advanced Reports Version 4.0

Siemens ≫ Desigo Cc Advanced Reports Version 4.1

Siemens ≫ Desigo Cc Advanced Reports Version 4.2

Siemens ≫ Desigo Cc Advanced Reports Version 5.0

Siemens ≫ Desigo Cc Advanced Reports Version 5.1

Siemens ≫ Desigo Cc Info Center Version 5.0

Siemens ≫ Desigo Cc Info Center Version 5.1

Siemens ≫ E-car Operation Center Version < 2021-12-13

Siemens ≫ Energy Engage Version 3.1

Siemens ≫ Energyip Version 8.5

Siemens ≫ Energyip Version 8.6

Siemens ≫ Energyip Version 8.7

Siemens ≫ Energyip Version 9.0

Siemens ≫ Energyip Prepay Version < 3.8.0.12

Siemens ≫ Gma-manager Version < 8.6.2j-398

Siemens ≫ Head-end System Universal Device Integration System

Siemens ≫ Industrial Edge Management

Siemens ≫ Industrial Edge Management Hub Version < 2021-12-13

Siemens ≫ Mendix

Siemens ≫ Mindsphere Version < 2021-12-16

Siemens ≫ Navigator Version < 2021-12-13

Siemens ≫ Nx

Siemens ≫ Opcenter Intelligence Version >= 3.2 < 3.5

Siemens ≫ Operation Scheduler Version <= 1.1.3

Siemens ≫ Sentron Powermanager Version 4.1

Siemens ≫ Sentron Powermanager Version 4.2

Siemens ≫ Siguard Dsa Version >= 4.2 < 4.4.1

Siemens ≫ Sipass Integrated Version 2.80

Siemens ≫ Sipass Integrated Version 2.85

Siemens ≫ Siveillance Command Version <= 4.16.2.1

Siemens ≫ Siveillance Control Pro

Siemens ≫ Siveillance Identity Version 1.5

Siemens ≫ Siveillance Identity Version 1.6

Siemens ≫ Siveillance Vantage

Siemens ≫ Siveillance Viewpoint

Siemens ≫ Solid Edge Cam Pro

Siemens ≫ Solid Edge Harness Design Version < 2020

Siemens ≫ Solid Edge Harness Design Version 2020

Siemens ≫ Solid Edge Harness Design Version 2020 Update -

Siemens ≫ Solid Edge Harness Design Version 2020 Update sp2002

Siemens ≫ Spectrum Power 4 Version < 4.70

Siemens ≫ Spectrum Power 4 Version 4.70 Update -

Siemens ≫ Spectrum Power 4 Version 4.70 Update sp7

Siemens ≫ Spectrum Power 4 Version 4.70 Update sp8

Siemens ≫ Spectrum Power 7 Version < 2.30

Siemens ≫ Spectrum Power 7 Version 2.30

Siemens ≫ Spectrum Power 7 Version 2.30 Update -

Siemens ≫ Spectrum Power 7 Version 2.30 Update sp2

Siemens ≫ Teamcenter

Siemens ≫ Vesys Version < 2019.1

Siemens ≫ Vesys Version 2019.1

Siemens ≫ Vesys Version 2019.1 Update -

Siemens ≫ Vesys Version 2019.1 Update sp1912

Siemens ≫ Vesys Version 2020.1 Update -

Siemens ≫ Vesys Version 2021.1 Update -

Siemens ≫ Xpedition Enterprise Version -

Siemens ≫ Xpedition Package Integrator Version -

Intel ≫ Computer Vision Annotation Tool Version -

Intel ≫ Datacenter Manager Version < 5.1

Intel ≫ Genomics Kernel Library Version -

Intel ≫ Oneapi Sample Browser Version - SwPlatform eclipse

Intel ≫ Secure Device Onboard Version -

Intel ≫ System Studio Version -

Debian ≫ Debian Linux Version 9.0

Debian ≫ Debian Linux Version 10.0

Debian ≫ Debian Linux Version 11.0

Fedoraproject ≫ Fedora Version 34

Fedoraproject ≫ Fedora Version 35

Sonicwall ≫ Email Security Version < 10.0.13

Netapp ≫ Active Iq Unified Manager Version - SwPlatform linux

Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere

Netapp ≫ Active Iq Unified Manager Version - SwPlatform windows

Netapp ≫ Brocade San Navigator Version -

Netapp ≫ Cloud Insights Version -

Netapp ≫ Cloud Manager Version -

Netapp ≫ Cloud Secure Agent Version -

Netapp ≫ Oncommand Insight Version -

Netapp ≫ Ontap Tools Version - SwPlatform vmware_vsphere

Netapp ≫ Snapcenter Version - SwPlatform vmware_vsphere

Netapp ≫ Solidfire Enterprise Sds Version -

Cisco ≫ Advanced Malware Protection Virtual Private Cloud Appliance Version < 3.5.4

Cisco ≫ Automated Subsea Tuning Version < 2.1.0

Cisco ≫ Broadworks Version < 2021.11_1.162

Cisco ≫ Business Process Automation Version < 3.0.000.115

Cisco ≫ Business Process Automation Version >= 3.1.000.000 < 3.1.000.044

Cisco ≫ Business Process Automation Version >= 3.2.000.000 < 3.2.000.009

Cisco ≫ Cloud Connect Version < 12.6\(1\)

Cisco ≫ Cloudcenter Version < 4.10.0.16

Cisco ≫ Cloudcenter Cost Optimizer Version < 5.5.2

Cisco ≫ Cloudcenter Suite Admin Version < 5.3.1

Cisco ≫ Cloudcenter Workload Manager Version < 5.5.2

Cisco ≫ Common Services Platform Collector Version < 2.9.1.3

Cisco ≫ Common Services Platform Collector Version >= 2.10.0 < 2.10.0.1

Cisco ≫ Connected Mobile Experiences Version -

Cisco ≫ Contact Center Domain Manager Version < 12.5\(1\)

Cisco ≫ Contact Center Management Portal Version < 12.5\(1\)

Cisco ≫ Crosswork Data Gateway Version < 2.0.2

Cisco ≫ Crosswork Data Gateway Version 3.0.0

Cisco ≫ Crosswork Network Controller Version < 2.0.1

Cisco ≫ Crosswork Network Controller Version 3.0.0

Cisco ≫ Crosswork Optimization Engine Version < 2.0.1

Cisco ≫ Crosswork Optimization Engine Version 3.0.0

Cisco ≫ Crosswork Platform Infrastructure Version < 4.0.1

Cisco ≫ Crosswork Platform Infrastructure Version 4.1.0

Cisco ≫ Crosswork Zero Touch Provisioning Version < 2.0.1

Cisco ≫ Crosswork Zero Touch Provisioning Version 3.0.0

Cisco ≫ Customer Experience Cloud Agent Version < 1.12.1

Cisco ≫ Cyber Vision Sensor Management Extension Version < 4.0.3

Cisco ≫ Data Center Network Manager Version < 11.3\(1\)

Cisco ≫ Dna Center Version < 2.1.2.8

Cisco ≫ Dna Center Version >= 2.2.2.0 < 2.2.2.8

Cisco ≫ Dna Center Version >= 2.2.3.0 < 2.2.3.4

Cisco ≫ Emergency Responder Version < 11.5\(4\)

Cisco ≫ Enterprise Chat And Email Version < 12.0\(1\)

Cisco ≫ Evolved Programmable Network Manager Version <= 4.1.1

Cisco ≫ Finesse Version < 12.6\(1\)

Cisco ≫ Fog Director Version -

Cisco ≫ Identity Services Engine Version < 2.4.0

Cisco ≫ Identity Services Engine Version 2.4.0 Update -

Cisco ≫ Integrated Management Controller Supervisor Version < 2.3.2.1

Cisco ≫ Intersight Virtual Appliance Version < 1.0.9-361

Cisco ≫ Iot Operations Dashboard Version -

Cisco ≫ Network Assurance Engine Version < 6.0.2

Cisco ≫ Network Services Orchestrator Version < 5.3.5.1

Cisco ≫ Network Services Orchestrator Version >= 5.4 < 5.4.5.2

Cisco ≫ Network Services Orchestrator Version >= 5.5 < 5.5.4.1

Cisco ≫ Network Services Orchestrator Version >= 5.6 < 5.6.3.1

Cisco ≫ Nexus Dashboard Version < 2.1.2

Cisco ≫ Nexus Insights Version < 6.0.2

Cisco ≫ Optical Network Controller Version < 1.1.0

Cisco ≫ Packaged Contact Center Enterprise Version < 11.6

Cisco ≫ Paging Server Version < 14.4.1

Cisco ≫ Prime Service Catalog Version < 12.1

Cisco ≫ Sd-wan Vmanage Version < 20.3.4.1

Cisco ≫ Sd-wan Vmanage Version >= 20.4 < 20.4.2.1

Cisco ≫ Sd-wan Vmanage Version >= 20.5 < 20.5.1.1

Cisco ≫ Sd-wan Vmanage Version >= 20.6 < 20.6.2.1

Cisco ≫ Smart Phy Version < 3.2.1

Cisco ≫ Ucs Central Version < 2.0\(1p\)

Cisco ≫ Ucs Director Version < 6.8.2.0

Cisco ≫ Unified Communications Manager SwEdition - Version < 11.5\(1\)

Cisco ≫ Unified Communications Manager SwEdition session_management Version < 11.5\(1\)

Cisco ≫ Unified Communications Manager Im And Presence Service Version < 11.5\(1\)

Cisco ≫ Unified Contact Center Enterprise Version < 11.6\(2\)

Cisco ≫ Unified Contact Center Express Version < 12.5\(1\)

Cisco ≫ Unified Customer Voice Portal Version < 11.6

Cisco ≫ Unified Customer Voice Portal Version 11.6

Cisco ≫ Unified Customer Voice Portal Version 12.0

Cisco ≫ Unified Customer Voice Portal Version 12.5

Cisco ≫ Unified Intelligence Center Version < 12.6\(1\)

Cisco ≫ Unity Connection Version < 11.5\(1\)

Cisco ≫ Video Surveillance Operations Manager Version < 7.14.4

Cisco ≫ Virtual Topology System Version < 2.6.7

Cisco ≫ Virtualized Infrastructure Manager Version < 3.2.0

Cisco ≫ Virtualized Infrastructure Manager Version >= 3.4.0 < 3.4.4

Cisco ≫ Virtualized Voice Browser Version < 12.5\(1\)

Cisco ≫ Wan Automation Engine Version < 7.3.0.2

Cisco ≫ Webex Meetings Server Version < 3.0

Cisco ≫ Webex Meetings Server Version 3.0 Update -

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release1

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release2

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release3

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release3 Edition -

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release3_security_patch4

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release3_security_patch5

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release3_service_pack_2

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release3_service_pack_3

Cisco ≫ Webex Meetings Server Version 3.0 Update maintenance_release4

Cisco ≫ Webex Meetings Server Version 4.0 Update -

Cisco ≫ Webex Meetings Server Version 4.0 Update maintenance_release1

Cisco ≫ Webex Meetings Server Version 4.0 Update maintenance_release2

Cisco ≫ Webex Meetings Server Version 4.0 Update maintenance_release3

Cisco ≫ Workload Optimization Manager Version < 3.2.1

Cisco ≫ Unified Sip Proxy Version < 10.2.1v2

Cisco ≫ Unified Workforce Optimization Version < 11.5\(1\)

Cisco ≫ Fxos Version 6.2.3

   Cisco ≫ Firepower 1010 Version -
   Cisco ≫ Firepower 1120 Version -
   Cisco ≫ Firepower 1140 Version -
   Cisco ≫ Firepower 1150 Version -
   Cisco ≫ Firepower 2110 Version -
   Cisco ≫ Firepower 2120 Version -
   Cisco ≫ Firepower 2130 Version -
   Cisco ≫ Firepower 2140 Version -
   Cisco ≫ Firepower 4110 Version -
   Cisco ≫ Firepower 4112 Version -
   Cisco ≫ Firepower 4115 Version -
   Cisco ≫ Firepower 4120 Version -
   Cisco ≫ Firepower 4125 Version -
   Cisco ≫ Firepower 4140 Version -
   Cisco ≫ Firepower 4145 Version -
   Cisco ≫ Firepower 4150 Version -
   Cisco ≫ Firepower 9300 Version -

Cisco ≫ Fxos Version 6.3.0

Cisco ≫ Fxos Version 6.4.0

Cisco ≫ Fxos Version 6.5.0

Cisco ≫ Fxos Version 6.6.0

Cisco ≫ Fxos Version 6.7.0

Cisco ≫ Fxos Version 7.0.0

Cisco ≫ Fxos Version 7.1.0

Cisco ≫ Automated Subsea Tuning Version 02.01.00

Cisco ≫ Broadworks Version -

Cisco ≫ Cloudcenter Suite Version 4.10.0.15

Cisco ≫ Cloudcenter Suite Version 5.3.0

Cisco ≫ Cloudcenter Suite Version 5.4.1

Cisco ≫ Cloudcenter Suite Version 5.5.0

Cisco ≫ Cloudcenter Suite Version 5.5.1

Cisco ≫ Crosswork Network Automation Version -

Cisco ≫ Crosswork Network Automation Version 2.0.0

Cisco ≫ Crosswork Network Automation Version 3.0.0

Cisco ≫ Crosswork Network Automation Version 4.1.0

Cisco ≫ Crosswork Network Automation Version 4.1.1

Cisco ≫ Cx Cloud Agent Version 001.012

Cisco ≫ Cyber Vision Version 4.0.2

Cisco ≫ Cyber Vision Sensor Management Extension Version 4.0.2

Cisco ≫ Dna Center Version 2.2.2.8

Cisco ≫ Dna Spaces Version -

Cisco ≫ Dna Spaces Connector Version -

Cisco ≫ Emergency Responder Version 11.5

Cisco ≫ Evolved Programmable Network Manager Version 3.0

Cisco ≫ Evolved Programmable Network Manager Version 3.1

Cisco ≫ Evolved Programmable Network Manager Version 4.0

Cisco ≫ Evolved Programmable Network Manager Version 4.1

Cisco ≫ Evolved Programmable Network Manager Version 5.0

Cisco ≫ Evolved Programmable Network Manager Version 5.1

Cisco ≫ Integrated Management Controller Supervisor Version 2.3.2.0

Cisco ≫ Intersight Virtual Appliance Version 1.0.9-343

Cisco ≫ Mobility Services Engine Version -

Cisco ≫ Network Services Orchestrator Version -

Cisco ≫ Optical Network Controller Version 1.1

Cisco ≫ Prime Service Catalog Version 12.1

Cisco ≫ Sd-wan Vmanage Version 20.3

Cisco ≫ Sd-wan Vmanage Version 20.4

Cisco ≫ Sd-wan Vmanage Version 20.5

Cisco ≫ Sd-wan Vmanage Version 20.6

Cisco ≫ Sd-wan Vmanage Version 20.6.1

Cisco ≫ Sd-wan Vmanage Version 20.7

Cisco ≫ Sd-wan Vmanage Version 20.8

Cisco ≫ Secure Firewall Threat Defense Version 6.2.3

Cisco ≫ Secure Firewall Threat Defense Version 6.3.0

Cisco ≫ Secure Firewall Threat Defense Version 6.4.0

Cisco ≫ Secure Firewall Threat Defense Version 6.5.0

Cisco ≫ Secure Firewall Threat Defense Version 6.6.0

Cisco ≫ Secure Firewall Threat Defense Version 6.7.0

Cisco ≫ Secure Firewall Threat Defense Version 7.0.0

Cisco ≫ Secure Firewall Threat Defense Version 7.1.0

Cisco ≫ Smart Phy Version 3.1.2

Cisco ≫ Smart Phy Version 3.1.3

Cisco ≫ Smart Phy Version 3.1.4

Cisco ≫ Smart Phy Version 3.1.5

Cisco ≫ Smart Phy Version 3.2.1

Cisco ≫ Smart Phy Version 21.3

Cisco ≫ Ucs Central Software Version 2.0

Cisco ≫ Unity Connection Version 11.5

Cisco ≫ Virtual Topology System Version 2.6.6

Cisco ≫ Wan Automation Engine Version 7.1.3

Cisco ≫ Wan Automation Engine Version 7.2.1

Cisco ≫ Wan Automation Engine Version 7.2.2

Cisco ≫ Wan Automation Engine Version 7.2.3

Cisco ≫ Wan Automation Engine Version 7.3

Cisco ≫ Wan Automation Engine Version 7.4

Cisco ≫ Wan Automation Engine Version 7.5

Cisco ≫ Wan Automation Engine Version 7.6

Cisco ≫ Webex Meetings Server Version 3.0

Cisco ≫ Webex Meetings Server Version 4.0

Snowsoftware ≫ Snow Commander Version < 8.10.0

Snowsoftware ≫ Vm Access Proxy Version < 3.6

Bentley ≫ Synchro SwEdition pro Version >= 6.1 < 6.2.4.2

Bentley ≫ Synchro 4d SwEdition pro Version < 6.4.3.2

Percussion ≫ Rhythmyx Version <= 7.3.2

Apple ≫ XCode Version < 13.3

10.12.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Apache Log4j2 Remote Code Execution Vulnerability

Schwachstelle

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

Beschreibung

For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Erforderliche Maßnahmen

10.12.2021:

https://www.cert.at/de/warnungen/2021/12/kritische-0-day-sicherheitslucke-in-apache-log4j-bibliothek

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	100%	1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	3.9	6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP	10	3.9	6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

26.08.2026 20:03

https://www.oracle.com/security-alerts/cpuapr2022.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Patch

Third Party Advisory

https://www.debian.org/security/2021/dsa-5020

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2021/12/10/1

Third Party Advisory

Mailing List

Mitigation

http://www.openwall.com/lists/oss-security/2021/12/10/2

Third Party Advisory

Mailing List

Mitigation

http://www.openwall.com/lists/oss-security/2021/12/10/3

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2021/12/13/1

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2021/12/13/2

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2021/12/14/4

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2021/12/15/3

Third Party Advisory

Mailing List

https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf

Third Party Advisory

https://github.com/cisagov/log4j-affected-db

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html

Third Party Advisory

Mailing List

https://logging.apache.org/log4j/2.x/security.html

Vendor Advisory

Release Notes

https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/

Patch

Third Party Advisory

Vendor Advisory

https://security.netapp.com/advisory/ntap-20211210-0007/

Third Party Advisory

https://twitter.com/kurtseifried/status/1469345530182455296

Third Party Advisory

Exploit

Broken Link

https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html

Third Party Advisory

https://www.kb.cert.org/vuls/id/930724

Third Party Advisory

US Government Resource

https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html

Third Party Advisory

Exploit

https://www.oracle.com/security-alerts/alert-cve-2021-44228.html

Third Party Advisory

http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html

Third Party Advisory

Broken Link

VDB Entry

http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html

Third Party Advisory

VDB Entry

http://seclists.org/fulldisclosure/2022/Dec/2

Third Party Advisory

Exploit

Mailing List

http://seclists.org/fulldisclosure/2022/Jul/11

Third Party Advisory

Mailing List

http://seclists.org/fulldisclosure/2022/Mar/23

Third Party Advisory

Mailing List

https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md

US Government Resource

Broken Link

Product

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228

Third Party Advisory

Exploit

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/

Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/

Release Notes

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032

Third Party Advisory

https://support.apple.com/kb/HT213189

Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-44228

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-44228

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-44228 (Log4Shell)

10.12.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

10.12.2021: