Known vulnerabilities in Logback 1.2.4-groovyless
Vendor:
QOS.ch
Software:
Logback
Version:
1.2.4-groovyless
Software CPE:
cpe:2.3:a:qos.ch:logback:*:*:*:*:*:*:*:*
Website:
https://www.qos.ch/shop/index
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
1.6.2
1.6.1
1.6.0
1.5.38
1.5.37
1.5.36
1.5.35
1.5.34
1.5.33
1.5.32
1.5.31
1.5.30
1.5.29
1.5.28
1.5.27
1.5.26
1.5.25
1.5.24
1.5.23
1.5.22
1.5.21
1.3.16
1.5.20
1.5.19
1.5.18
1.5.17
1.5.16
1.3.15
1.5.15
1.5.14
1.5.13
1.5.12
1.5.11
1.5.10
1.5.9
1.5.8
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.2.13
1.3.14
1.4.14
1.4.13
1.3.13
1.4.12
1.3.12
1.4.11
1.3.11
1.3.10
1.4.10
1.4.9
1.3.9
1.4.8
1.3.8
1.4.7
1.3.7
1.2.12
1.4.6
1.3.6
1.4.5
1.3.5
1.4.4
1.3.4
1.4.3
1.3.3
1.3.2
1.4.2
1.4.1
1.3.1
1.4.0
1.3.0
1.3.0-beta0
1.3.0-alpha16
1.3.0-alpha15
1.2.11
1.3.0-alpha14
1.3.0-alpha13
1.2.10
1.3.0-alpha12
1.3.0-alpha11
1.2.9
1.2.8
1.2.7
1.3.0-alpha10
1.3.0-alpha9
1.3.0-alpha8
1.3.0-alpha7
1.3.0-alpha6
1.2.6
1.2.5
1.2.4-groovyless
1.2.4
1.3.0-alpha5
1.3.0-alpha4
1.3.0-alpha3
1.3.0-alpha2
1.3.0-alpha1
1.3.0-alpha0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.13
1.0.12
1.0.11
1.0.10
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.9.30
0.9.29
0.9.28
0.9.27
0.9.26
0.9.25
0.9.24
0.9.23
0.9.22
0.9.21
0.9.20
0.9.19
0.9.18
0.9.17
0.9.16
0.9.15
0.9.14
0.9.13
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9
0.8.1
0.8
0.7.1
0.7
0.6
0.5
0.3
0.2.5
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137751 - Deserialization of Untrusted Data CVE-2026-9828 |
CWE-502 | Medium | 1.5.33 | 15.07.2026 |
SB2026071556 SB2026071557 SB2026071559 |
||
| #VU123671 - Improper input validation CVE-2026-1225 |
CWE-20 | Low | 1.5.25 | 10.03.2026 |
SB2026031035 SB2026031036 SB2026031041 and 6 more |
||
| #VU103290 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-12801 |
CWE-611 | Medium | 1.3.15, 1.5.13 | 24.01.2025 |
SB2025012460 SB2025012488 SB2025012495 and 23 more |
||
| #VU103289 - Improper Control of Generation of Code ('Code Injection') CVE-2024-12798 |
CWE-94 | Low | 1.3.15, 1.5.13 | 24.01.2025 |
SB2025012460 SB2025012488 SB2025012495 and 28 more |
||
| #VU59053 - Improper Control of Generation of Code ('Code Injection') CVE-2021-42550 |
CWE-94 | Medium | 1.2.9, 1.3.0 alpha11 | 19.12.2021 |
SB2021121904 SB2022022307 SB2022032929 and 21 more |