Known vulnerabilities in apache-log4j2 (Debian package) 2.0~beta9-1
Vendor:
Debian
Software:
apache-log4j2 (Debian package)
Version:
2.0~beta9-1
Software CPE:
cpe:2.3:o:debian:apache-log4j2_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
3
Public exploits:
2
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046 |
CWE-94 | High | 2.16.0-1~deb10u1, 2.16.0-1~deb11u1 | 15.12.2021 |
SB2021121504 SB2021121511 SB2021121512 and 178 more |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | 2.16.0-1~deb10u1, 2.16.0-1~deb11u1 | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 338 more |
||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | 2.15.0-1~deb10u1, 2.15.0-1~deb11u1 | 04.05.2020 |
SB2020050406 SB2020071606 SB2020071620 and 67 more |