Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.zenframework.z8.dependencies.commons:log4j-1.2.17

5 known vulnerabilities (2 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 critical, 3 high
Registry
Maven Central

Advisories 5

  • A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

    Affected: through 2.0.

  • CVE-2022-23305Critical 9.8

    SQL injection in JDBC Appender in Apache Log4j V1

    Affected: through 2.0.

  • Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    Affected: through 2.0.

  • Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

    Affected: through 2.0.

  • CVE-2019-17571Critical 9.8

    Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely…

    Affected: versions 2.0.