Lucene search
RedHatRHSA-2022:0661HistoryFeb 23, 2022 - 2:02 p.m.
(RHSA-2022:0661) Moderate: Red Hat Fuse 7.10.1 release and security update
2022-02-2314:02:20
access.redhat.com
32
0.127 Low
EPSS
Percentile
95.5%
This release of Red Hat Fuse 7.10.1 serves as a replacement for Red Hat Fuse 7.10, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
-
log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender (CVE-2021-4104)
-
log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink (CVE-2022-23302)
-
log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender (CVE-2022-23305)
-
log4j: Unsafe deserialization flaw in Chainsaw log viewer (CVE-2022-23307)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
oraclelinux
oraclelinux
parfait:0.5 security update
2022-01-27 00:00:00
log4j security update
2022-02-08 00:00:00
log4j security update
2022-05-23 00:00:00
redhat
redhat
ibm
ibm
osv
osv
apache-log4j1.2 - security update
2022-01-31 00:00:00
Important: parfait:0.5 security update
2022-01-26 14:27:19
Important: parfait:0.5 security update
2022-01-26 14:27:19
nessus
nessus
RHEL 8 : RHV Manager (ovirt-engine) security update [ovirt-4.4.10-1] (Low) (RHSA-2022:0475)
2022-02-09 00:00:00
RHEL 8 : parfait:0.5 (RHSA-2022:0290)
2022-02-11 00:00:00
rocky
rocky
parfait:0.5 security update
2022-01-26 14:27:19
debian
debian
[SECURITY] [DLA 2905-1] apache-log4j1.2 security update
2022-01-31 14:24:44
suse
suse
Security update for kafka (important)
2022-02-16 00:00:00
Security update for log4j (important)
2022-01-27 00:00:00
Security update for kafka (important)
2022-02-17 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2905-1)
2022-02-01 00:00:00
openSUSE: Security Advisory for log4j12 (openSUSE-SU-2022:0226-1)
2022-02-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0212-1)
2022-01-28 00:00:00
almalinux
almalinux
Important: parfait:0.5 security update
2022-01-26 14:27:19
atlassian
atlassian
Crowd: Multiple vulnerabilities in log4j < 1.2.7-atlassian-16
2022-05-18 08:53:01
Jira: Multiple vulnerabilities in log4j < 1.2.17-atlassian-16
2022-06-06 12:49:38
Confluence: Multiple vulnerabilities in log4j < 1.2.7-atlassian-16
2022-06-01 07:36:00
centos
centos
log4j security update
2022-02-07 16:47:44
amazon
amazon
Important: log4j
2023-03-30 22:50:00
Important: log4j
2022-02-15 22:54:00
ubuntu
ubuntu
Apache Log4j vulnerabilities
2023-04-05 00:00:00
nvd
nvd
CVE-2022-23302
2022-01-18 16:15:08
CVE-2022-23305
2022-01-18 16:15:08
github
github
Deserialization of Untrusted Data in Log4j 1.x
2022-01-21 23:27:14
SQL Injection in Log4j 1.2.x
2022-01-21 23:26:47
cve
cve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2022-23305
2022-01-18 16:15:08
f5
f5
K59563964 : Apache Log4j Remote Code Execution vulnerability CVE-2022-23302
2022-01-31 00:00:00
K34002344 : Overview of Log4j vulnerabilities (2021 and 2022)
2022-02-01 00:00:00
K97120268 : Apache Log4j SQL injection vulnerability CVE-2022-23305
2022-01-31 00:00:00
cvelist
cvelist
CVE-2022-23305 SQL injection in JDBC Appender in Apache Log4j V1
2022-01-18 15:25:22
prion
prion
Deserialization of untrusted data
2022-01-18 16:15:00
Design/Logic Flaw
2022-01-18 16:15:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-23307, CVE-2022-23302
2022-02-10 13:49:32
Fix of CVE: CVE-2022-23305
2022-02-03 20:01:40
ubuntucve
ubuntucve
CVE-2022-23302
2022-01-18 00:00:00
CVE-2022-23305
2022-01-18 00:00:00
debiancve
debiancve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2022-23305
2022-01-18 16:15:08
mageia
mageia
Updated davmail packages fix security vulnerability
2023-04-15 22:03:44
veracode
veracode
SQL Injection
2022-01-19 12:47:45
Deserialisation Of Untrusted Object
2022-01-19 08:50:05
Remote Code Execution (RCE)
2022-01-19 04:24:50
cnvd
cnvd
Apache Log4j SQL Injection Vulnerability
2022-01-20 00:00:00
Apache log4j JMSSink deserialization code execution vulnerability
2022-01-20 00:00:00
Apache log4j Chainsaw deserialization code execution vulnerability
2022-01-20 00:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Apache Log4J
2023-07-24 18:52:15
gentoo
gentoo
Apache Log4j: Multiple Vulnerabilities
2024-02-18 00:00:00
redhatcve
redhatcve