Search
For "Log4j2" across CVEs, vendor advisories, threat actors, IOCs, security research, and news.
Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Apache Log4j2 Remote Code Execution Vulnerability
Improper Input Validation and Injection in Apache Log4j2
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans
Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.17.1
A new critical vulnerability was disclosed for log4j, a very popular Java logging framework from the Apache foundation. All current versions of log4j2 up to 2.14.1 are vulnerable. You can remediate this vulnerability by updating to version