Latest medium severity vulnerabilities for "apache log4j"

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Versions

Apache Log4jApache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Log4jApache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

Apache Log4jApache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters

Apache Log4jApache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility

Apache Log4jApache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass

Don't miss critical vulnerabilities

Apache Log4jApache Log4j Core: Missing TLS hostname verification in Socket appender

Apache Log4jJMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the att…

Apache Log4jApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

Apache Log4jApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

Company

Resources

Contact