Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veeamVeeam softwareVEEAM:KB4254
HistoryDec 13, 2021 - 12:00 a.m.

Log4j Vulnerability (CVE-2021-44228)

2021-12-1300:00:00
Veeam software
www.veeam.com
42
log4j vulnerability
veeam products
apache logs4j

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.974

Percentile

100.0%

JSON

General Vulnerability Details

CVE-2021-44228

Impact on Veeam Software

Veeam products are notaffected by this vulnerability.

Apache Log4j is notin use by any Veeam products.

More Information

To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Related

checkpoint_advisories 1
githubexploit 86
cvelist 1
cve 1
threatpost 10
nuclei 1
cisa 2
nvd 2
nessus 10
cisa_kev 1
prion 1
seebug 1
metasploit 2
trellix 3
packetstorm 3
zdt 2
rapid7blog 4
vmware 1
thn 4
suse 1
ibm 40
ubuntu 1
fedora 1
hackerone 3
mmpc 1
kitploit 1
hivepro 1
osv 3
openvas 4
freebsd 1
github 1
wallarmlab 1
trendmicroblog 1
redhat 3
checkpoint_advisories
checkpoint_advisories
VMware vCenter Server Remote Code Execution (CVE-2021-21985)
2021-06-08 00:00:00
githubexploit
githubexploit
Exploit for Improper Input Validation in Vmware Vcenter Server
2021-06-03 12:17:06
Exploit for Improper Input Validation in Vmware Vcenter Server
2021-07-11 20:38:19
Exploit for Improper Input Validation in Vmware Vcenter Server
2021-05-27 02:28:48
cvelist
cvelist
CVE-2021-21985
2021-05-26 14:04:30
cve
cve
CVE-2021-21985
2021-05-26 15:15:07
threatpost
threatpost
New Ransomware Gangs Haron & BlackMatter Are After Fat Cats
2021-07-28 18:33:02
VMware Sounds Ransomware Alarm Over Critical Severity Bug
2021-05-26 19:45:50
Conti Ransomware Gang Has Full Log4Shell Attack Chain
2021-12-20 22:11:30
nuclei
nuclei
VMware vSphere Client (HTML5) - Remote Code Execution
2021-05-31 13:50:59
cisa
cisa
Unpatched VMware vCenter Software
2021-06-04 00:00:00
Ivanti Updates Log4j Advisory with Security Updates for Multiple Products  
2022-01-14 00:00:00
nvd
nvd
CVE-2021-21985
2021-05-26 15:15:07
CVE-2021-44228
2021-12-10 10:15:09
nessus
nessus
VMware vCenter Server Virtual SAN Health Check plug-in RCE (CVE-2021-21985) (direct check)
2021-06-03 00:00:00
VMware vCenter Server 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2021-0010)
2021-05-25 00:00:00
Cisco Identity Services Log4j Engine Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)
2022-05-02 00:00:00
cisa_kev
cisa_kev
VMware vCenter Server Improper Input Validation Vulnerability
2021-11-03 00:00:00
prion
prion
Remote code execution
2021-05-26 15:15:00
seebug
seebug
VMware vCenter Server远程代码执行漏洞（CVE-2021-21985）
2021-05-26 00:00:00
metasploit
metasploit
VMware vCenter Server Virtual SAN Health Check Plugin RCE
2021-07-12 18:07:05
Log4Shell HTTP Header Injection
2021-12-29 14:10:07
trellix
trellix
Are Virtual Machines the New Gold for Cyber Criminals?
2021-06-10 00:00:00
Are Virtual Machines the New Gold for Cyber Criminals?
2021-06-10 00:00:00
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
packetstorm
packetstorm
VMware vCenter Server Virtual SAN Health Check Remote Code Execution
2021-07-13 00:00:00
Apache Log4j2 2.14.1 Information Disclosure
2021-12-14 00:00:00
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution
2022-01-24 00:00:00
zdt
zdt
VMware vCenter Server Virtual SAN Health Check Remote Code Execution Exploit
2021-07-16 00:00:00
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution Exploit
2022-01-24 00:00:00
rapid7blog
rapid7blog
CVE-2021-21985: What you need to know about the latest critical vCenter Server vulnerability
2021-05-26 18:57:20
Being Naughty to See Who Was Nice: Machine Learning Attacks on Santa’s List
2022-01-14 14:46:41
Log4Shell 2 Months Later: Security Strategies for the Internet's New Normal
2022-02-17 18:00:00
vmware
vmware
VMware vCenter Server updates address remote code execution and authentication vulnerabilities (CVE-2021-21985, CVE-2021-21986)
2021-05-25 00:00:00
thn
thn
ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack
2021-06-05 10:58:00
NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
2022-01-08 07:04:00
Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations
2022-08-27 03:23:00
suse
suse
Security update for log4j (important)
2021-12-12 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Apache Log4j addressed in IBM Spectrum Conductor
2022-01-07 16:23:40
Security Bulletin: IBM Security Verify Governance Products NOT Affected by CVE-2021-44228 Exploit
2022-04-04 21:53:13
Security Bulletin: Is Blueworks Live affected by CVE-2021-44228 (Log4j Vulnerability)?
2021-12-17 17:30:47
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-17 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: jansi-2.1.1-4.fc34
2021-12-22 01:14:26
hackerone
hackerone
U.S. Dept Of Defense: Log4Shell: RCE 0-day exploit on █████████
2021-12-16 18:32:13
MTN Group: Remote code injection in Log4j on http://mtn1app.mtncameroon.net - CVE-2021-44228
2021-12-14 03:55:04
Acronis: [forum.acronis.com] JNDI Code Injection due an outdated log4j component
2021-12-19 06:07:01
mmpc
mmpc
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
kitploit
kitploit
NodeSecurityShield - A Developer And Security Engineer Friendly Package For Securing NodeJS Applications
2022-05-14 21:30:00
hivepro
hivepro
Monti ransomware infiltrates networks via the well-known Log4Shell
2022-09-16 10:51:13
osv
osv
apache-log4j2 - security update
2021-12-12 00:00:00
apache-log4j2 vulnerability
2021-12-17 12:46:46
apache-log4j2 vulnerability
2021-12-14 13:39:20
openvas
openvas
Fedora: Security Advisory for log4j (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check
2021-12-20 00:00:00
Mageia: Security Advisory (MGASA-2021-0556)
2022-01-28 00:00:00
freebsd
freebsd
graylog -- include log4j patches
2021-12-10 00:00:00
github
github
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
wallarmlab
wallarmlab
Log4j 0day mitigation update CVE-2021-44228
2021-12-10 20:56:40
trendmicroblog
trendmicroblog
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-13 00:00:00
redhat
redhat
(RHSA-2021:5126) Critical: Red Hat Integration Camel Extensions for Quarkus GA security update
2021-12-14 16:15:45
(RHSA-2021:5093) Critical: Red Hat build of Eclipse Vert.x 4.1.5 SP1 security update
2021-12-14 15:57:34
(RHSA-2021:5130) Critical: Red Hat Integration Camel-K 1.6.2 release and security update
2021-12-14 17:51:25

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.974

Percentile

100.0%

JSON
Related for VEEAM:KB4254
checkpoint_advisories1githubexploit86cvelist1cve1threatpost10nuclei1cisa2nvd2nessus10cisa_kev1prion1seebug1metasploit2trellix3packetstorm3zdt2rapid7blog4vmware1thn4suse1ibm40ubuntu1fedora1hackerone3mmpc1kitploit1hivepro1osv3openvas4freebsd1github1wallarmlab1trendmicroblog1redhat3