Lucene search
CISACISA:6C962B804E593B231FDE50912F4D093AHistoryDec 10, 2021 - 12:00 a.m.
Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation
2021-12-1000:00:00
us-cert.cisa.gov
167
apache
log4j
rce vulnerability
security advisory
cve-2021-44228
java logging utility
cisa
upgrade
mitigations
privacy policy
product survey
EPSS
0.965
Percentile
99.6%
The Apache Software Foundation has released a security advisory to address a remote code execution vulnerability (CVE-2021-44228) affecting Log4j versions 2.0-beta9 to 2.14.1. A remote attacker could exploit this vulnerability to take control of an affected system. Log4j is an open-source, Java-based logging utility widely used by enterprise applications and cloud services.
CISA encourages users and administrators to review the Apache Log4j 2.15.0 Announcement and upgrade to Log4j 2.15.0 or apply the recommended mitigations immediately.
This product is provided subject to this Notification and this Privacy & Use policy.
Please share your thoughts.
We recently updated our anonymous product survey; we’d welcome your feedback.
Related
githubexploit
githubexploit
Exploit for Expression Language Injection in Apache Log4J
2021-12-13 04:14:18
Exploit for Expression Language Injection in Apache Log4J
2021-12-12 14:05:05
Exploit for Expression Language Injection in Apache Log4J
2021-12-13 15:04:31
trendmicroblog
trendmicroblog
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-13 00:00:00
threatpost
threatpost
Where the Latest Log4Shell Attacks Are Coming From
2021-12-13 19:00:01
What the Log4Shell Bug Means for SMBs: Experts Weigh In
2021-12-14 17:54:47
Relentless Log4j Attacks Include State Actors, Possible Worm
2021-12-15 23:18:44
nessus
nessus
VMware vCenter Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)
2021-12-13 00:00:00
FreeBSD : graylog -- include log4j patches (3fadd7e4-f8fb-45a0-a218-8fd6423c338f)
2021-12-13 00:00:00
FreeBSD : OpenSearch -- Log4Shell (4b1ac5a3-5bd4-11ec-8602-589cfc007716)
2021-12-13 00:00:00
redhat
redhat
rapid7blog
rapid7blog
Log4Shell Makes Its Appearance in Hacker Chatter: 4 Observations
2021-12-14 21:05:17
3 Reasons to Join Rapid7’s Cloud Security Summit
2022-03-09 17:06:13
What's New in InsightVM and Nexpose: Q1 2022 in Review
2022-04-19 17:52:17
ibm
ibm
Security Bulletin: IBM Security Verify Privilege Products NOT Affected by CVE-2021-44228 Exploit
2021-12-13 13:37:26
Security Bulletin: IBM Security Directory Integrator NOT Affected by CVE-2021-44228 Exploit
2021-12-16 04:19:55
Security Bulletin: Vulnerability exists in Watson Explorer (CVE-2021-44228)
2021-12-16 13:28:20
impervablog
impervablog
Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions
2021-12-14 22:55:49
Analytics Are Essential for Effective Database Security
2022-01-13 15:23:02
kaspersky
kaspersky
KLA12390 RCE vulnerability in Apache Log4j
2021-12-10 00:00:00
KLA12392 RCE vulnerability in Microsoft Azure
2021-12-16 00:00:00
KLA12395 RCE vulnerability in Microsoft SQL Server
2021-12-16 00:00:00
akamaiblog
akamaiblog
Threat Intelligence on Log4j CVE: Key Findings and Their Implications
2021-12-17 19:30:00
qualysblog
qualysblog
Log4Shell – Follow This Multi-Layered Approach for Detection and Remediation
2021-12-28 18:00:00
packetstorm
packetstorm
Log4Shell HTTP Header Injection
2022-01-12 00:00:00
Intel Data Center Manager 5.1 Local Privilege Escalation
2022-12-09 00:00:00
MobileIron Log4Shell Remote Command Execution
2022-08-03 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: ███ ████████ running a vulnerable log4j
2021-12-31 00:55:49
U.S. Dept Of Defense: ██████████ running a vulnerable log4j
2021-12-11 00:16:38
osv
osv
log4j-2.13.2-2.1 on GA media
2024-06-15 00:00:00
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
amd
amd
AMD Response to Log4j (Log4Shell) Vulnerability
2021-12-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-12-10 15:09:45
cisa
cisa
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00
hivepro
hivepro
Iranian hackers leveraged Log4Shell to penetrate US federal agency
2022-11-17 12:28:57
msrc
msrc
CVE-2021-44228 Apache Log4j 2 に対するマイクロソフトの対応
2021-12-12 08:00:00
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
mssecure
mssecure
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
wallarmlab
wallarmlab
Update on Log4Shell (CVE-2021-44228)
2021-12-10 20:22:36
Log4j 0day mitigation update CVE-2021-44228
2021-12-10 20:56:40
fedora
fedora
[SECURITY] Fedora 34 Update: log4j-2.16.0-1.fc34
2021-12-22 01:14:26
talosblog
talosblog
How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity
2024-02-21 13:54:48
openvas
openvas
Debian: Security Advisory (DLA-2842-1)
2021-12-13 00:00:00
openSUSE: Security Advisory for logback (openSUSE-SU-2021:1613-1)
2022-02-01 00:00:00
cve
cve
CVE-2021-44228
2021-12-10 10:15:09
freebsd
freebsd
graylog -- include log4j patches
2021-12-10 00:00:00
kitploit
kitploit
metasploit
metasploit
Log4Shell HTTP Header Injection
2021-12-29 14:10:07