Known vulnerabilities in Apache Foundation Apache Log4j 2.13.1
2.25.3
2.25.2
2.25.1
2.25.0
2.24.3
2.24.2
2.24.1
2.24.0
2.23.1
2.23.0
2.22.1
2.22.0
2.21.1
2.21.0
2.20.0
2.12.4
2.12.3
2.12.2
2.3.2
2.3.1
2.19.0
2.18.0
2.17.2
2.17.1
2.17.0
2.16.0
2.15.0
2.14.1
2.14.0
2.13.0
2.13.3
2.13.2
2.13.1
2.12.1
2.12.0
2.11.2
2.11.1
2.11.0
2.10.0
2.9.1
2.9.0
1.2.17
1.2.15
1.2.14
1.2.13
1.2.12
1.2.11
1.2.10
1.2.9
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.1.3
1.0.4
1.2.16
2.8.2
2.0
2.0.1
2.0.2
2.1
2.2
2.3
2.4
2.4.1
2.5
2.6
2.6.1
2.6.2
2.7
2.8
2.8.1
Security bulletins (8)
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB2025122245: Missing TLS hostname verification in Apache Log4j | Medium | 22.12.2025 | |
| SB2022042527: Multiple vulnerabilities in Oracle Retail Financial Integration | Medium | 25.04.2022 | |
| SB20220422113: Multiple vulnerabilities in Hyperion Data Relationship Management | Medium | 22.04.2022 | |
| SB2021122816: Remote code execution via JDBC Appender in Apache Log4j | Medium | 28.12.2021 | |
| SB2021121802: Infinite recursion in Apache Log4j | Medium | 18.12.2021 | |
| SB2021121504: Improper input validation in Apache Log4j | High | 15.12.2021 | |
| SB2021121003: Remote code execution in Apache Log4J | Critical | 10.12.2021 | |
| SB2020050406: Improper Certificate Validation in Apache Log4j | Low | 04.05.2020 |