Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit0B596CD2-49C7-50A8-A43C-8DE3027EC2B7
HistoryJan 09, 2022 - 1:38 p.m.

Exploit for Deserialization of Untrusted Data in Apache Log4J

2022-01-0913:38:38
369

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.976 High

EPSS

Percentile

100.0%

JSON

CVE-2021-44228(Apache Log4j Remote Code Execution）

> [all log…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

threatpost 35
qualysblog 3
suse 3
ibm 53
githubexploit 62
mmpc 1
nessus 8
github 2
kitploit 2
freebsd 1
rapid7blog 3
ics 2
hivepro 3
openvas 1
msrc 2
cisa 1
impervablog 2
debian 1
osv 2
hackerone 1
redhat 2
wordfence 1
qt 1
zdt 1
mssecure 1
kaspersky 2
trellix 1
veracode 1
wallarmlab 1
cisa_kev 1
threatpost
threatpost
Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts
2022-03-21 19:18:32
Reporting Mandates to Clear Up Feds’ Hazy Look into Threat Landscape – Podcast
2022-03-17 13:00:38
The Harsh Truths of Cybersecurity in 2022, Part Two
2022-02-24 21:11:33
qualysblog
qualysblog
What’s Next After Log4Shell?
2023-02-22 03:36:56
How to Make Log4Shell Remediation Quick & Effective
2022-01-11 16:58:48
Log4Shell Exploit Detection and Response with Qualys Multi-Vector EDR
2021-12-14 23:55:59
suse
suse
Security update for log4j (important)
2021-12-15 00:00:00
Security update for logback (important)
2021-12-17 00:00:00
Security update for log4j (important)
2021-12-15 00:00:00
ibm
ibm
Security Bulletin: Due to Apache Log4j vulnerability, Novalink could allow a remote attacker to execute arbitrary code on the system. (CVE-2021-44228)
2021-12-16 16:55:34
Security Bulletin: Vulnerability in Apache Log4j affects Content Collector for IBM Connections (CVE-2021-44228)
2021-12-17 14:00:26
Security Bulletin: IBM Cloud Transformation Advisor is affected by Apache Log4j vulnerability (CVE-2021-44228)
2022-12-05 19:00:57
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 00:14:45
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-16 21:19:17
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-10 06:59:10
mmpc
mmpc
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
nessus
nessus
FreeBSD : bastillion -- log4j vulnerability (515df85a-5cd7-11ec-a16d-001517a2e1a4)
2021-12-14 00:00:00
MobileIron Core Log4Shell Direct Check (CVE-2021-44228)
2022-01-21 00:00:00
Apache JSPWiki Log4Shell Direct Check (CVE-2021-44228)
2022-01-07 00:00:00
github
github
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
Using GitHub’s security features to help identify Log4j exposure in your codebase
2021-12-14 19:46:00
kitploit
kitploit
Log4J-Detect - Script To Detect The "Log4j" Java Library Vulnerability (CVE-2021-44228) For A List Of URLs With Multithreading
2022-01-06 11:30:00
CVE-Vulnerability-Information-Downloader - Downloads Information From NIST (CVSS), First.Org (EPSS), And CISA (Exploited Vulnerabilities) And Combines Them Into One List
2023-02-25 11:30:00
freebsd
freebsd
openhab -- log4j remote code injection
2021-12-10 00:00:00
rapid7blog
rapid7blog
Test for Log4Shell With InsightAppSec Using New Functionality
2021-12-22 21:50:50
5 Security Projects That Are Giving Back
2022-01-04 18:44:58
Using InsightVM to Find Apache Log4j CVE-2021-44228
2021-12-14 14:17:29
ics
ics
Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
2022-11-25 12:00:00
Sensormatic PowerManage (Update A)
2022-03-08 12:00:00
hivepro
hivepro
Deep Panda deploys new rootkit “Fire Chili” by exploiting Log4shell in VMware horizon
2022-04-05 12:57:28
Lazarus’s Operation Blacksmith Deploys Novel Dlang RATs
2023-12-13 06:46:17
Iranian hackers leveraged Log4Shell to penetrate US federal agency
2022-11-17 12:28:57
openvas
openvas
openSUSE: Security Advisory for logback (openSUSE-SU-2021:4109-1)
2022-02-01 00:00:00
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
cisa
cisa
Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation
2021-12-10 00:00:00
impervablog
impervablog
How We’re Protecting Customers & Staying Ahead of CVE-2021-44228
2021-12-11 02:31:39
Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions
2021-12-14 22:55:49
debian
debian
[SECURITY] [DLA 2842-1] apache-log4j2 security update
2021-12-12 15:09:37
osv
osv
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
hackerone
hackerone
U.S. Dept Of Defense: LOGJ4 VUlnerability [HtUS]
2022-07-04 14:01:23
redhat
redhat
(RHSA-2021:5140) Low: Red Hat JBoss Enterprise Application Platform 7.4 security update
2021-12-15 02:55:01
(RHSA-2021:5138) Critical: Red Hat AMQ Streams 1.8.4 release and security update
2021-12-14 21:45:43
wordfence
wordfence
Analyzing Attack Data and Trends Targeting Log4J
2022-08-02 14:06:05
qt
qt
The Qt Company Products Are Not Affected by CVE-2021-44228 (Log4j vulnerability)
2021-12-15 00:00:00
zdt
zdt
MobileIron Log4Shell Remote Command Execution Exploit
2022-08-04 00:00:00
mssecure
mssecure
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
kaspersky
kaspersky
KLA12393 RCE vulnerability in Microsoft System Center
2021-12-16 00:00:00
KLA12390 RCE vulnerability in Apache Log4j
2021-12-10 00:00:00
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-12-10 15:09:45
wallarmlab
wallarmlab
Update on Log4Shell (CVE-2021-44228)
2021-12-10 20:22:36
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.976 High

EPSS

Percentile

100.0%

JSON
Related for 0B596CD2-49C7-50A8-A43C-8DE3027EC2B7
threatpost35qualysblog3suse3ibm53githubexploit62mmpc1nessus8github2kitploit2freebsd1rapid7blog3ics2hivepro3openvas1msrc2cisa1impervablog2debian1osv2hackerone1redhat2wordfence1qt1zdt1mssecure1kaspersky2trellix1veracode1wallarmlab1cisa_kev1