Known vulnerabilities in eap7-log4j-jboss-logmanager (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:eap7-log4j-jboss-logmanager_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
22
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.1.4-2.Final_redhat_1.1.ep7.el7
1.1.4-2.Final_redhat_1.1.ep7.el6
1.3.1-2.Final_redhat_00003.1.el9eap
1.3.1-2.Final_redhat_00003.1.el8eap
1.3.1-2.Final_redhat_00003.1.el7eap
1.2.2-2.Final_redhat_00002.1.el7eap
1.3.1-1.Final_redhat_00002.1.el9eap
1.3.1-1.Final_redhat_00002.1.el8eap
1.3.1-1.Final_redhat_00002.1.el7eap
1.2.2-1.Final_redhat_00002.1.el7eap
1.2.2-1.Final_redhat_00002.1.el8eap
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 1.2.2-1.Final_redhat_00002.1.el7eap, 1.2.2-1.Final_redhat_00002.1.el8eap, 1.2.2-2.Final_redhat_00002.1.el7eap | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 1.2.2-1.Final_redhat_00002.1.el7eap, 1.2.2-1.Final_redhat_00002.1.el8eap, 1.2.2-2.Final_redhat_00002.1.el7eap | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
Showing elements 21 - 40 out of 22