Known vulnerabilities in Apache Foundation Apache Log4j 2.16.0
2.25.4
2.25.3
2.25.2
2.25.1
2.25.0
2.24.3
2.24.2
2.24.1
2.24.0
2.23.1
2.23.0
2.22.1
2.22.0
2.21.1
2.21.0
2.20.0
2.12.4
2.12.3
2.12.2
2.3.2
2.3.1
2.19.0
2.18.0
2.17.2
2.17.1
2.17.0
2.16.0
2.15.0
2.14.1
2.14.0
2.13.0
2.13.3
2.13.2
2.13.1
2.12.1
2.12.0
2.11.2
2.11.1
2.11.0
2.10.0
2.9.1
2.9.0
1.2.17
1.2.15
1.2.14
1.2.13
1.2.12
1.2.11
1.2.10
1.2.9
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.1.3
1.0.4
1.2.16
2.8.2
2.0
2.0.1
2.0.2
2.1
2.2
2.3
2.4
2.4.1
2.5
2.6
2.6.1
2.6.2
2.7
2.8
2.8.1
Security bulletins (7)
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB20260428217: Multiple vulnerabilities in Apache Log4j | Medium | 28.04.2026 | |
| SB2026042265: Improper validation of certificate with host mismatch in Oracle Communications Performance Intelligence Center | Medium | 22.04.2026 | |
| SB2025122245: Missing TLS hostname verification in Apache Log4j | Medium | 22.12.2025 | |
| SB2022042527: Multiple vulnerabilities in Oracle Retail Financial Integration | Medium | 25.04.2022 | |
| SB20220422113: Multiple vulnerabilities in Hyperion Data Relationship Management | Medium | 22.04.2022 | |
| SB2021122816: Remote code execution via JDBC Appender in Apache Log4j | Medium | 28.12.2021 | |
| SB2021121802: Infinite recursion in Apache Log4j | Medium | 18.12.2021 |