Known vulnerabilities in apache-log4j1.2 (Debian package) 1.2.17-6~bpo8+1

Vendor: Debian
Software: apache-log4j1.2 (Debian package)
Version: 1.2.17-6~bpo8+1
Software CPE: cpe:2.3:o:debian:apache-log4j1_2_debian_package:*:*:*:*:*:debian_linux:*:*
Website: https://www.debian.org/
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting apache-log4j1.2 (Debian package) version 1.2.17-6~bpo8+1 apache-log4j1.2 (Debian package) 1.2.17-6~bpo8+1 is affected by 1 vulnerabilities: 1 high Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 1.2.17-7+deb9u1, 1.2.17-8+deb10u1 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more