Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-45046 (GCVE-0-2021-45046)
Vulnerability from cvelistv5 – Published: 2021-12-14 16:55 – Updated: 2025-10-21 23:25Title
Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
Summary
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.
Severity
9 (Critical)
SSVC
Exploitation: active
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-04 19:31 UTC
CWE
- CWE-917 - Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Assigner
References
22 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Apache Software Foundation | Apache Log4j |
Affected:
Apache Log4j2 , < 2.16.0
(custom)
|
guessed |
CISA
Known Exploited Vulnerability - GCVE BCP-07 Compliant
KEV entry ID: f3aa2676-c093-4d57-9d05-af8a1125e178
Exploited: Yes
Timestamps
First Seen: 2023-05-01
Asserted: 2023-05-01
Scope
Notes: KEV entry: Apache Log4j2 Deserialization of Untrusted Data Vulnerability | Affected: Apache / Log4j2 | Description: Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations. | Required action: Apply updates per vendor instructions. | Due date: 2023-05-22 | Known ransomware campaign use (KEV): Known | Notes (KEV): https://logging.apache.org/log4j/2.x/security.html; https://nvd.nist.gov/vuln/detail/CVE-2021-45046
Evidence
Type: Vendor Report
Signal: Successful Exploitation
Confidence: 80%
Source: cisa-kev
Details
| Cwes | CWE-917 |
|---|---|
| Feed | CISA Known Exploited Vulnerabilities Catalog |
| Product | Log4j2 |
| Due Date | 2023-05-22 |
| Date Added | 2023-05-01 |
| Vendorproject | Apache |
| Vulnerabilityname | Apache Log4j2 Deserialization of Untrusted Data Vulnerability |
| Knownransomwarecampaignuse | Known |
References
Created: 2026-02-02 12:27 UTC
| Updated: 2026-02-06 07:17 UTC
KEVIntel
Known Exploited Vulnerability - GCVE BCP-07 Compliant
KEV entry ID: a1fc0fb1-8afa-4dd7-b596-10c2b6be9149
Exploited: Yes
Timestamps
First Seen: 2023-05-01
Asserted: 2023-05-01
Scope
Notes: KEVIntel entry: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack | Affected: Apache Software Foundation / Apache Log4j | CVSS: 9.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False
Evidence
Type: Public Report
Signal: Confirmed Compromise
Confidence: 70%
Source: kevintel
Details
| Feed | KEVIntel (kevintel.com) |
|---|---|
| Title | Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack |
| Vendor | Apache Software Foundation |
| Product | Apache Log4j |
| Added Date | 2023-05-01T00:00:00.000Z |
| Cvss Score | 9.0 |
| Epss Score | None |
| Cvss Severity | CRITICAL |
| Epss Percentile | None |
| Used In Malware | yes |
| Ahead Of Cisa Kev | None |
| Not Yet In Cisa Kev | False |
References
Created: 2026-06-23 14:05 UTC
| Updated: 2026-07-10 06:14 UTC
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T04:32:13.624Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/12/14/4"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://logging.apache.org/log4j/2.x/security.html"
},
{
"name": "VU#930724",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "https://www.kb.cert.org/vuls/id/930724"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html"
},
{
"name": "20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"
},
{
"name": "[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/12/15/3"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
},
{
"name": "DSA-5022",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2021/dsa-5022"
},
{
"name": "[oss-security] 20211218 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/12/18/1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf"
},
{
"name": "FEDORA-2021-5c9d12a93e",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/"
},
{
"name": "FEDORA-2021-abbe24e41c",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202310-16"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2021-45046",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-04T19:31:22.638704Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2023-05-01",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:25:22.768Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046"
}
],
"timeline": [
{
"lang": "en",
"time": "2023-05-01T00:00:00.000Z",
"value": "CVE-2021-45046 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Apache Log4j",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "2.16.0",
"status": "affected",
"version": "Apache Log4j2",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default."
}
],
"metrics": [
{
"other": {
"content": {
"other": "moderate (CVSS: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)"
},
"type": "unknown"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-917",
"description": "CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-26T06:06:18.017Z",
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"shortName": "apache"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2021/12/14/4"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://logging.apache.org/log4j/2.x/security.html"
},
{
"name": "VU#930724",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "https://www.kb.cert.org/vuls/id/930724"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html"
},
{
"name": "20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"
},
{
"name": "[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2021/12/15/3"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
},
{
"name": "DSA-5022",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2021/dsa-5022"
},
{
"name": "[oss-security] 20211218 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2021/12/18/1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf"
},
{
"name": "FEDORA-2021-5c9d12a93e",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/"
},
{
"name": "FEDORA-2021-abbe24e41c",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"url": "https://security.gentoo.org/glsa/202310-16"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"ID": "CVE-2021-45046",
"STATE": "PUBLIC",
"TITLE": "Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Apache Log4j",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "Apache Log4j2",
"version_value": "2.16.0"
}
]
}
}
]
},
"vendor_name": "Apache Software Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": [
{
"other": "moderate (CVSS: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)"
}
],
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032",
"refsource": "CONFIRM",
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032"
},
{
"name": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html",
"refsource": "CONFIRM",
"url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"
},
{
"name": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
"refsource": "MISC",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/12/14/4"
},
{
"name": "https://logging.apache.org/log4j/2.x/security.html",
"refsource": "CONFIRM",
"url": "https://logging.apache.org/log4j/2.x/security.html"
},
{
"name": "VU#930724",
"refsource": "CERT-VN",
"url": "https://www.kb.cert.org/vuls/id/930724"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"
},
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html",
"refsource": "CONFIRM",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html"
},
{
"name": "20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021",
"refsource": "CISCO",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"
},
{
"name": "[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/12/15/3"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
},
{
"name": "DSA-5022",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2021/dsa-5022"
},
{
"name": "[oss-security] 20211218 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/12/18/1"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf"
},
{
"name": "FEDORA-2021-5c9d12a93e",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/"
},
{
"name": "FEDORA-2021-abbe24e41c",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"assignerShortName": "apache",
"cveId": "CVE-2021-45046",
"datePublished": "2021-12-14T16:55:09.000Z",
"dateReserved": "2021-12-14T00:00:00.000Z",
"dateUpdated": "2025-10-21T23:25:22.768Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"cisa_known_exploited": {
"cveID": "CVE-2021-45046",
"cwes": "[\"CWE-917\"]",
"dateAdded": "2023-05-01",
"dueDate": "2023-05-22",
"knownRansomwareCampaignUse": "Known",
"notes": "https://logging.apache.org/log4j/2.x/security.html; https://nvd.nist.gov/vuln/detail/CVE-2021-45046",
"product": "Log4j2",
"requiredAction": "Apply updates per vendor instructions.",
"shortDescription": "Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.",
"vendorProject": "Apache",
"vulnerabilityName": "Apache Log4j2 Deserialization of Untrusted Data Vulnerability"
},
"epss": {
"cve": "CVE-2021-45046",
"date": "2026-08-23",
"epss": "0.99977",
"percentile": "0.9998"
},
"fkie_nvd": {
"cisaActionDue": "2023-05-22",
"cisaExploitAdd": "2023-05-01",
"cisaRequiredAction": "Apply updates per vendor instructions.",
"cisaVulnerabilityName": "Apache Log4j2 Deserialization of Untrusted Data Vulnerability",
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.0.1\", \"versionEndExcluding\": \"2.12.2\", \"matchCriteriaId\": \"155A3CFA-903D-4DC9-9A64-C964FAABACC4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.13.0\", \"versionEndExcluding\": \"2.16.0\", \"matchCriteriaId\": \"88DD4847-0961-4CC4-90FC-DFCDC235F62F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"17854E42-7063-4A55-BF2A-4C7074CC2D60\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*\", \"matchCriteriaId\": \"53F32FB2-6970-4975-8BD0-EAE12E9AD03A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"B773ED91-1D39-42E6-9C52-D02210DE1A94\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:log4j:2.0:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF24312D-1A62-482E-8078-7EC24758B710\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cvat:computer_vision_annotation_tool:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"99BBE644-5421-472E-8595-5279E0CC67B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:audio_development_kit:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"099344DD-8AEE-49A0-88A8-691A8A1E651F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:datacenter_manager:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"070C1452-C349-4953-A748-3039F2217811\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:genomics_kernel_library:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"18989EBC-E1FB-473B-83E0-48C8896C2E96\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:oneapi:-:*:*:*:*:eclipse:*:*\", \"matchCriteriaId\": \"720D3597-B74B-4540-AD50-80884183D5DE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:secure_device_onboard:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"22BEE177-D117-478C-8EAD-9606DEDF9FD5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:sensor_solution_firmware_development_kit:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F021E2E7-0D8F-4336-82A6-77E521347C4F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:system_debugger:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1F66B0A2-22C0-41D5-B866-1764DEC12CB2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:system_studio:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FC619106-991C-413A-809D-C2410EBA4CDB\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:sppa-t3000_ses3000_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E8320869-CBF4-4C92-885C-560C09855BFA\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:sppa-t3000_ses3000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"755BA221-33DD-40A2-A517-8574D042C261\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:captial:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2019.1\", \"matchCriteriaId\": \"07856DAA-EDB4-4522-BA16-CD302C9E39EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:captial:2019.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"F7AD819D-D093-472E-AA47-1A925111E4C8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:captial:2019.1:sp1912:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D07A11A-A3C6-4D44-B2E0-A8358D23947A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61597661-A3B0-4A14-AA6B-C911E0063390\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB524B33-68E7-46A2-B5CE-BCD9C3194B8B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F852C6D-44A0-4CCE-83C7-4501CAD73F9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AA61161C-C2E7-4852-963E-E2D3DFBFDC7B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A76AA04A-BB43-4027-895E-D1EACFCDF41B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2A6B60F3-327B-49B7-B5E4-F1C60896C9BB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_info_center:5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BCF281E-B0A2-49E2-AEF8-8691BDCE08D5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:desigo_cc_info_center:5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A87EFCC4-4BC1-4FEA-BAA4-8FF221838EBD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:e-car_operation_center:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2021-12-13\", \"matchCriteriaId\": \"B678380B-E95E-4A8B-A49D-D13B62AA454E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energy_engage:3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4557476B-0157-44C2-BB50-299E7C7E1E72\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energyip:8.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"991B2959-5AA3-4B68-A05A-42D9860FAA9D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energyip:8.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E5948A0-CA31-41DF-85B6-1E6D09E5720B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energyip:8.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C08D302-EEAC-45AA-9943-3A5F09E29FAB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energyip:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D53BA68C-B653-4507-9A2F-177CF456960F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energyip_prepay:3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1F0C3D5E-579F-42C6-9D8C-37969A1D17D2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:energyip_prepay:3.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2C16C460-9482-4A22-92AC-1AE0E87D7F28\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:gma-manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.6.2j-398\", \"matchCriteriaId\": \"0E180527-5C36-4158-B017-5BEDC0412FD6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:head-end_system_universal_device_integration_system:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFDADA98-1CD0-45DA-9082-BFC383F7DB97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:industrial_edge_management:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E33D707F-100E-4DE7-A05B-42467DE75EAC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:industrial_edge_management_hub:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2021-12-13\", \"matchCriteriaId\": \"DD3EAC80-44BE-41D2-8D57-0EE3DBA1E1B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:logo\\\\!_soft_comfort:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AC8AB52-F4F4-440D-84F5-2776BFE1957A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:mendix:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6AF6D774-AC8C-49CA-A00B-A2740CA8FA91\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:mindsphere:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2021-12-11\", \"matchCriteriaId\": \"6423B1A7-F09F-421A-A0AC-3059CB89B110\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:navigator:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2021-12-13\", \"matchCriteriaId\": \"48C6A61B-2198-4B9E-8BCF-824643C81EC3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:nx:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BEE2F7A1-8281-48F1-8BFB-4FE0D7E1AEF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:opcenter_intelligence:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.2\", \"matchCriteriaId\": \"C74B9880-FFF9-48CA-974F-54FB80F30D2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:operation_scheduler:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"1.1.3\", \"matchCriteriaId\": \"74D1F4AD-9A60-4432-864F-4505B3C60659\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sentron_powermanager:4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7ABA5332-8D1E-4129-A557-FCECBAC12827\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sentron_powermanager:4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C3AA865-5570-4C8B-99DE-431AD7B163F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siguard_dsa:4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00E03FB6-37F9-4559-8C86-F203D6782920\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siguard_dsa:4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"90439591-BA01-4007-A2B6-B316548D4595\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siguard_dsa:4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E1F3B8B4-4D1B-4913-BD5F-1A04B47F829A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sipass_integrated:2.80:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83E77D85-0AE8-41D6-AC0C-983A8B73C831\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sipass_integrated:2.85:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"02B28A44-3708-480D-9D6D-DDF8C21A15EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siveillance_command:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"4.16.2.1\", \"matchCriteriaId\": \"2FC0A575-F771-4B44-A0C6-6A5FD98E5134\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siveillance_control_pro:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D1D6B61-1F17-4008-9DFB-EF419777768E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siveillance_identity:1.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9772EE3F-FFC5-4611-AD9A-8AD8304291BB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siveillance_identity:1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF524892-278F-4373-A8A3-02A30FA1AFF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siveillance_vantage:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F30DE588-9479-46AA-8346-EA433EE83A5F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:siveillance_viewpoint:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4941EAD6-8759-4C72-ABA6-259C0E838216\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:solid_edge_cam_pro:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5BF2708F-0BD9-41BF-8CB1-4D06C4EFB777\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:solid_edge_harness_design:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2020\", \"matchCriteriaId\": \"0762031C-DFF1-4962-AE05-0778B27324B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:solid_edge_harness_design:2020:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"96271088-1D1B-4378-8ABF-11DAB3BB4DDC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:solid_edge_harness_design:2020:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"2595AD24-2DF2-4080-B780-BC03F810B9A9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:solid_edge_harness_design:2020:sp2002:*:*:*:*:*:*\", \"matchCriteriaId\": \"88096F08-F261-4E3E-9EEB-2AB0225CD6F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_4:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.70\", \"matchCriteriaId\": \"044994F7-8127-4F03-AA1A-B2AB41D68AF5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_4:4.70:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6CB3A8D-9577-41FB-8AC4-0DF8DE6A519C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp7:*:*:*:*:*:*\", \"matchCriteriaId\": \"17B7C211-6339-4AF2-9564-94C7DE52EEB7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp8:*:*:*:*:*:*\", \"matchCriteriaId\": \"DBCCBBBA-9A4F-4354-91EE-10A1460BBA3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.30\", \"matchCriteriaId\": \"12F81F6B-E455-4367-ADA4-8A5EC7F4754A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_7:2.30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A5EF509E-3799-4718-B361-EFCBA17AEEF3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_7:2.30:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"8CA31645-29FC-4432-9BFC-C98A808DB8CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:spectrum_power_7:2.30:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB424991-0B18-4FFC-965F-FCF4275F56C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B209EFE-77F2-48CD-A880-ABA0A0A81AB1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:tracealertserverplus:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6340621E-0FAF-4684-B457-E621E51E13A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:vesys:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2019.1\", \"matchCriteriaId\": \"72D238AB-4A1F-458D-897E-2C93DCD7BA6C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:vesys:2019.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9778339A-EA93-4D18-9A03-4EB4CBD25459\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:vesys:2019.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"1747F127-AB45-4325-B9A1-F3D12E69FFC8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:vesys:2019.1:sp1912:*:*:*:*:*:*\", \"matchCriteriaId\": \"18BBEF7C-F686-4129-8EE9-0F285CE38845\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:xpedition_enterprise:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD525494-2807-48EA-AED0-11B9CB5A6A9B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:xpedition_package_integrator:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1EDCBF98-A857-48BC-B04D-6F36A1975AA5\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.12\", \"matchCriteriaId\": \"B5BAA8A5-74B3-48EB-8287-302927197A4E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A930E247-0B43-43CB-98FF-6CE7B8189835\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6bk1602-0aa12-0tp0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF99FE8F-40D0-48A8-9A40-43119B259535\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6bk1602-0aa12-0tp0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.7.0\", \"matchCriteriaId\": \"BD64FC36-CC7B-4FD7-9845-7EA1DDB0E627\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6bk1602-0aa22-0tp0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F3F61BCB-64FA-463C-8B95-8868995EDBC0\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6bk1602-0aa22-0tp0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.7.0\", \"matchCriteriaId\": \"D0012304-B1C8-460A-B891-42EBF96504F5\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6bk1602-0aa32-0tp0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5A189B7-DDBF-4B84-997F-637CEC5FF12B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6bk1602-0aa32-0tp0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.7.0\", \"matchCriteriaId\": \"B02BCF56-D9D3-4BF3-85A2-D445E997F5EC\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6bk1602-0aa42-0tp0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"035AFD6F-E560-43C8-A283-8D80DAA33025\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6bk1602-0aa42-0tp0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.7.0\", \"matchCriteriaId\": \"4A2DB5BA-1065-467A-8FB6-81B5EC29DC0C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6bk1602-0aa52-0tp0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4594FF76-A1F8-4457-AE90-07D051CD0DCB\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6bk1602-0aa52-0tp0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.7.0\", \"matchCriteriaId\": \"809EB87E-561A-4DE5-9FF3-BBEE0FA3706E\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.\"}, {\"lang\": \"es\", \"value\": \"Se descubri\\u00f3 que la correcci\\u00f3n para abordar CVE-2021-44228 en Apache Log4j versiones 2.15.0 estaba incompleta en ciertas configuraciones no predeterminadas. Esto podr\\u00eda permitir a los atacantes con control sobre los datos de entrada de Thread Context Map (MDC) cuando la configuraci\\u00f3n de registro utiliza un Pattern Layout no predeterminado con un Context Lookup (por ejemplo, $${ctx:loginId}) o un Thread Context Map pattern (%X, %mdc, o %MDC) para elaborar datos de entrada maliciosos utilizando un patr\\u00f3n JNDI Lookup que resulta en una fuga de informaci\\u00f3n y ejecuci\\u00f3n de c\\u00f3digo remoto en algunos entornos y ejecuci\\u00f3n de c\\u00f3digo local en todos los entornos. Log4j versiones 2.16.0 (Java 8) y 2.12.2 (Java 7) solucionan este problema eliminando el soporte para los patrones de b\\u00fasqueda de mensajes y deshabilitando la funcionalidad JNDI por defecto\"}]",
"id": "CVE-2021-45046",
"lastModified": "2024-11-21T06:31:51.470",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 9.0, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 6.0}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:P/I:P/A:P\", \"baseScore\": 5.1, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 4.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2021-12-14T19:15:07.733",
"references": "[{\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/14/4\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/15/3\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/18/1\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Release Notes\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Release Notes\"]}, {\"url\": \"https://logging.apache.org/log4j/2.x/security.html\", \"source\": \"security@apache.org\", \"tags\": [\"Mitigation\", \"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202310-16\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2021-44228\", \"source\": \"security@apache.org\", \"tags\": [\"Not Applicable\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-5022\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/930724\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"source\": \"security@apache.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2022.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/14/4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/15/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/18/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Release Notes\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Release Notes\"]}, {\"url\": \"https://logging.apache.org/log4j/2.x/security.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\", \"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202310-16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2021-44228\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Not Applicable\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-5022\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/930724\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "security@apache.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"security@apache.org\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-917\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-917\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-45046\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2021-12-14T19:15:07.733\",\"lastModified\":\"2026-06-17T04:13:05.570\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.\"},{\"lang\":\"es\",\"value\":\"Se descubri\u00f3 que la correcci\u00f3n para abordar CVE-2021-44228 en Apache Log4j versiones 2.15.0 estaba incompleta en ciertas configuraciones no predeterminadas. Esto podr\u00eda permitir a los atacantes con control sobre los datos de entrada de Thread Context Map (MDC) cuando la configuraci\u00f3n de registro utiliza un Pattern Layout no predeterminado con un Context Lookup (por ejemplo, $${ctx:loginId}) o un Thread Context Map pattern (%X, %mdc, o %MDC) para elaborar datos de entrada maliciosos utilizando un patr\u00f3n JNDI Lookup que resulta en una fuga de informaci\u00f3n y ejecuci\u00f3n de c\u00f3digo remoto en algunos entornos y ejecuci\u00f3n de c\u00f3digo local en todos los entornos. Log4j versiones 2.16.0 (Java 8) y 2.12.2 (Java 7) solucionan este problema eliminando el soporte para los patrones de b\u00fasqueda de mensajes y deshabilitando la funcionalidad JNDI por defecto\"}],\"affected\":[{\"source\":\"security@apache.org\",\"affectedData\":[{\"vendor\":\"Apache Software Foundation\",\"product\":\"Apache Log4j\",\"versions\":[{\"version\":\"Apache Log4j2\",\"lessThan\":\"2.16.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":6.0},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":6.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:P/A:P\",\"baseScore\":5.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":4.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-02-04T19:31:22.638704Z\",\"id\":\"CVE-2021-45046\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2023-05-01\",\"cisaActionDue\":\"2023-05-22\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Apache Log4j2 Deserialization of Untrusted Data Vulnerability\",\"weaknesses\":[{\"source\":\"security@apache.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-917\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-917\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.0.1\",\"versionEndExcluding\":\"2.12.2\",\"matchCriteriaId\":\"155A3CFA-903D-4DC9-9A64-C964FAABACC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.13.0\",\"versionEndExcluding\":\"2.16.0\",\"matchCriteriaId\":\"88DD4847-0961-4CC4-90FC-DFCDC235F62F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"17854E42-7063-4A55-BF2A-4C7074CC2D60\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*\",\"matchCriteriaId\":\"53F32FB2-6970-4975-8BD0-EAE12E9AD03A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B773ED91-1D39-42E6-9C52-D02210DE1A94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:log4j:2.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF24312D-1A62-482E-8078-7EC24758B710\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cvat:computer_vision_annotation_tool:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99BBE644-5421-472E-8595-5279E0CC67B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:audio_development_kit:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"099344DD-8AEE-49A0-88A8-691A8A1E651F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:datacenter_manager:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"070C1452-C349-4953-A748-3039F2217811\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:genomics_kernel_library:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18989EBC-E1FB-473B-83E0-48C8896C2E96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:oneapi:-:*:*:*:*:eclipse:*:*\",\"matchCriteriaId\":\"720D3597-B74B-4540-AD50-80884183D5DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:secure_device_onboard:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22BEE177-D117-478C-8EAD-9606DEDF9FD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:sensor_solution_firmware_development_kit:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F021E2E7-0D8F-4336-82A6-77E521347C4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:system_debugger:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F66B0A2-22C0-41D5-B866-1764DEC12CB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:system_studio:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC619106-991C-413A-809D-C2410EBA4CDB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:sppa-t3000_ses3000_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8320869-CBF4-4C92-885C-560C09855BFA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:sppa-t3000_ses3000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"755BA221-33DD-40A2-A517-8574D042C261\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:captial:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2019.1\",\"matchCriteriaId\":\"07856DAA-EDB4-4522-BA16-CD302C9E39EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:captial:2019.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7AD819D-D093-472E-AA47-1A925111E4C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:captial:2019.1:sp1912:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D07A11A-A3C6-4D44-B2E0-A8358D23947A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61597661-A3B0-4A14-AA6B-C911E0063390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB524B33-68E7-46A2-B5CE-BCD9C3194B8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F852C6D-44A0-4CCE-83C7-4501CAD73F9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA61161C-C2E7-4852-963E-E2D3DFBFDC7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A76AA04A-BB43-4027-895E-D1EACFCDF41B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A6B60F3-327B-49B7-B5E4-F1C60896C9BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_info_center:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BCF281E-B0A2-49E2-AEF8-8691BDCE08D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:desigo_cc_info_center:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A87EFCC4-4BC1-4FEA-BAA4-8FF221838EBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:e-car_operation_center:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2021-12-13\",\"matchCriteriaId\":\"B678380B-E95E-4A8B-A49D-D13B62AA454E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energy_engage:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4557476B-0157-44C2-BB50-299E7C7E1E72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energyip:8.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"991B2959-5AA3-4B68-A05A-42D9860FAA9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energyip:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E5948A0-CA31-41DF-85B6-1E6D09E5720B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energyip:8.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C08D302-EEAC-45AA-9943-3A5F09E29FAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energyip:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D53BA68C-B653-4507-9A2F-177CF456960F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energyip_prepay:3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F0C3D5E-579F-42C6-9D8C-37969A1D17D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:energyip_prepay:3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C16C460-9482-4A22-92AC-1AE0E87D7F28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:gma-manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.6.2j-398\",\"matchCriteriaId\":\"0E180527-5C36-4158-B017-5BEDC0412FD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:head-end_system_universal_device_integration_system:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFDADA98-1CD0-45DA-9082-BFC383F7DB97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:industrial_edge_management:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E33D707F-100E-4DE7-A05B-42467DE75EAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:industrial_edge_management_hub:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2021-12-13\",\"matchCriteriaId\":\"DD3EAC80-44BE-41D2-8D57-0EE3DBA1E1B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:logo\\\\!_soft_comfort:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AC8AB52-F4F4-440D-84F5-2776BFE1957A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:mendix:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AF6D774-AC8C-49CA-A00B-A2740CA8FA91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:mindsphere:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2021-12-11\",\"matchCriteriaId\":\"6423B1A7-F09F-421A-A0AC-3059CB89B110\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:navigator:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2021-12-13\",\"matchCriteriaId\":\"48C6A61B-2198-4B9E-8BCF-824643C81EC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nx:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BEE2F7A1-8281-48F1-8BFB-4FE0D7E1AEF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:opcenter_intelligence:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.2\",\"matchCriteriaId\":\"C74B9880-FFF9-48CA-974F-54FB80F30D2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:operation_scheduler:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.1.3\",\"matchCriteriaId\":\"74D1F4AD-9A60-4432-864F-4505B3C60659\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sentron_powermanager:4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7ABA5332-8D1E-4129-A557-FCECBAC12827\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sentron_powermanager:4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C3AA865-5570-4C8B-99DE-431AD7B163F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siguard_dsa:4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00E03FB6-37F9-4559-8C86-F203D6782920\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siguard_dsa:4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90439591-BA01-4007-A2B6-B316548D4595\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siguard_dsa:4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1F3B8B4-4D1B-4913-BD5F-1A04B47F829A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sipass_integrated:2.80:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83E77D85-0AE8-41D6-AC0C-983A8B73C831\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sipass_integrated:2.85:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02B28A44-3708-480D-9D6D-DDF8C21A15EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siveillance_command:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.16.2.1\",\"matchCriteriaId\":\"2FC0A575-F771-4B44-A0C6-6A5FD98E5134\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siveillance_control_pro:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D1D6B61-1F17-4008-9DFB-EF419777768E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siveillance_identity:1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9772EE3F-FFC5-4611-AD9A-8AD8304291BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siveillance_identity:1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF524892-278F-4373-A8A3-02A30FA1AFF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siveillance_vantage:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F30DE588-9479-46AA-8346-EA433EE83A5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:siveillance_viewpoint:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4941EAD6-8759-4C72-ABA6-259C0E838216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:solid_edge_cam_pro:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BF2708F-0BD9-41BF-8CB1-4D06C4EFB777\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:solid_edge_harness_design:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2020\",\"matchCriteriaId\":\"0762031C-DFF1-4962-AE05-0778B27324B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:solid_edge_harness_design:2020:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96271088-1D1B-4378-8ABF-11DAB3BB4DDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:solid_edge_harness_design:2020:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"2595AD24-2DF2-4080-B780-BC03F810B9A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:solid_edge_harness_design:2020:sp2002:*:*:*:*:*:*\",\"matchCriteriaId\":\"88096F08-F261-4E3E-9EEB-2AB0225CD6F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_4:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.70\",\"matchCriteriaId\":\"044994F7-8127-4F03-AA1A-B2AB41D68AF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_4:4.70:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6CB3A8D-9577-41FB-8AC4-0DF8DE6A519C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp7:*:*:*:*:*:*\",\"matchCriteriaId\":\"17B7C211-6339-4AF2-9564-94C7DE52EEB7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp8:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBCCBBBA-9A4F-4354-91EE-10A1460BBA3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.30\",\"matchCriteriaId\":\"12F81F6B-E455-4367-ADA4-8A5EC7F4754A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_7:2.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5EF509E-3799-4718-B361-EFCBA17AEEF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_7:2.30:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CA31645-29FC-4432-9BFC-C98A808DB8CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:spectrum_power_7:2.30:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB424991-0B18-4FFC-965F-FCF4275F56C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B209EFE-77F2-48CD-A880-ABA0A0A81AB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:tracealertserverplus:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6340621E-0FAF-4684-B457-E621E51E13A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:vesys:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2019.1\",\"matchCriteriaId\":\"72D238AB-4A1F-458D-897E-2C93DCD7BA6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:vesys:2019.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9778339A-EA93-4D18-9A03-4EB4CBD25459\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:vesys:2019.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"1747F127-AB45-4325-B9A1-F3D12E69FFC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:vesys:2019.1:sp1912:*:*:*:*:*:*\",\"matchCriteriaId\":\"18BBEF7C-F686-4129-8EE9-0F285CE38845\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:xpedition_enterprise:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD525494-2807-48EA-AED0-11B9CB5A6A9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:xpedition_package_integrator:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EDCBF98-A857-48BC-B04D-6F36A1975AA5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.12\",\"matchCriteriaId\":\"B5BAA8A5-74B3-48EB-8287-302927197A4E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6bk1602-0aa12-0tp0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF99FE8F-40D0-48A8-9A40-43119B259535\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6bk1602-0aa12-0tp0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.7.0\",\"matchCriteriaId\":\"BD64FC36-CC7B-4FD7-9845-7EA1DDB0E627\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6bk1602-0aa22-0tp0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3F61BCB-64FA-463C-8B95-8868995EDBC0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6bk1602-0aa22-0tp0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.7.0\",\"matchCriteriaId\":\"D0012304-B1C8-460A-B891-42EBF96504F5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6bk1602-0aa32-0tp0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5A189B7-DDBF-4B84-997F-637CEC5FF12B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6bk1602-0aa32-0tp0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.7.0\",\"matchCriteriaId\":\"B02BCF56-D9D3-4BF3-85A2-D445E997F5EC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6bk1602-0aa42-0tp0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"035AFD6F-E560-43C8-A283-8D80DAA33025\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6bk1602-0aa42-0tp0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.7.0\",\"matchCriteriaId\":\"4A2DB5BA-1065-467A-8FB6-81B5EC29DC0C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6bk1602-0aa52-0tp0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4594FF76-A1F8-4457-AE90-07D051CD0DCB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6bk1602-0aa52-0tp0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.7.0\",\"matchCriteriaId\":\"809EB87E-561A-4DE5-9FF3-BBEE0FA3706E\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2021/12/14/4\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/12/15/3\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/12/18/1\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://logging.apache.org/log4j/2.x/security.html\",\"source\":\"security@apache.org\",\"tags\":[\"Mitigation\",\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202310-16\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.cve.org/CVERecord?id=CVE-2021-44228\",\"source\":\"security@apache.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-5022\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/930724\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/12/14/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/12/15/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/12/18/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://logging.apache.org/log4j/2.x/security.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202310-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.cve.org/CVERecord?id=CVE-2021-44228\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-5022\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/930724\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-08-20T01:55:51+00:00",
"cve": "CVE-2021-45046",
"id": "CVE-2021-45046",
"initial_release_date": "2021-12-14T00:00:00+00:00",
"product_status:fixed": "123",
"product_status:known_affected": "4",
"product_status:known_not_affected": "2365",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-45046.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-26T16:52:46Z",
"cve": "CVE-2021-45046",
"id": "CVE-2021-45046",
"initial_release_date": "2023-02-15T03:36:27Z",
"product_status:known_not_affected": "201",
"product_status:recommended": "134",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2021-45046",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-45046.json",
"version": "16"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2021-44228\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/14/4\", \"name\": \"[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://logging.apache.org/log4j/2.x/security.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/930724\", \"name\": \"VU#930724\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT-VN\", \"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\", \"name\": \"20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021\", \"tags\": [\"vendor-advisory\", \"x_refsource_CISCO\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/15/3\", \"name\": \"[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-5022\", \"name\": \"DSA-5022\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/18/1\", \"name\": \"[oss-security] 20211218 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\", \"name\": \"FEDORA-2021-5c9d12a93e\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\", \"name\": \"FEDORA-2021-abbe24e41c\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202310-16\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T04:32:13.624Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-45046\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-04T19:31:22.638704Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2023-05-01\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046\"}}}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2023-05-01T00:00:00.000Z\", \"value\": \"CVE-2021-45046 added to CISA KEV\"}], \"references\": [{\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046\", \"tags\": [\"government-resource\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-04T19:31:38.496Z\"}}], \"cna\": {\"title\": \"Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"other\": {\"type\": \"unknown\", \"content\": {\"other\": \"moderate (CVSS: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\"}}}], \"affected\": [{\"vendor\": \"Apache Software Foundation\", \"product\": \"Apache Log4j\", \"versions\": [{\"status\": \"affected\", \"version\": \"Apache Log4j2\", \"lessThan\": \"2.16.0\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2021-44228\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/14/4\", \"name\": \"[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://logging.apache.org/log4j/2.x/security.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/930724\", \"name\": \"VU#930724\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT-VN\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\", \"name\": \"20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021\", \"tags\": [\"vendor-advisory\", \"x_refsource_CISCO\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/15/3\", \"name\": \"[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-5022\", \"name\": \"DSA-5022\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/18/1\", \"name\": \"[oss-security] 20211218 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\", \"name\": \"FEDORA-2021-5c9d12a93e\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\", \"name\": \"FEDORA-2021-abbe24e41c\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2022.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://security.gentoo.org/glsa/202310-16\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-917\", \"description\": \"CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"f0158376-9dc2-43b6-827c-5f631a4d8d09\", \"shortName\": \"apache\", \"dateUpdated\": \"2023-10-26T06:06:18.017Z\"}, \"x_legacyV4Record\": {\"impact\": [{\"other\": \"moderate (CVSS: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_name\": \"Apache Log4j2\", \"version_value\": \"2.16.0\", \"version_affected\": \"\u003c\"}]}, \"product_name\": \"Apache Log4j\"}]}, \"vendor_name\": \"Apache Software Foundation\"}]}}, \"data_type\": \"CVE\", \"generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"references\": {\"reference_data\": [{\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\", \"name\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\", \"name\": \"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2021-44228\", \"name\": \"https://www.cve.org/CVERecord?id=CVE-2021-44228\", \"refsource\": \"MISC\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/14/4\", \"name\": \"[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"refsource\": \"MLIST\"}, {\"url\": \"https://logging.apache.org/log4j/2.x/security.html\", \"name\": \"https://logging.apache.org/log4j/2.x/security.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.kb.cert.org/vuls/id/930724\", \"name\": \"VU#930724\", \"refsource\": \"CERT-VN\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\", \"name\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\", \"name\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd\", \"name\": \"20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021\", \"refsource\": \"CISCO\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/15/3\", \"name\": \"[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"refsource\": \"MLIST\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\", \"name\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://www.debian.org/security/2021/dsa-5022\", \"name\": \"DSA-5022\", \"refsource\": \"DEBIAN\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/12/18/1\", \"name\": \"[oss-security] 20211218 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"refsource\": \"MLIST\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\", \"name\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\", \"name\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/\", \"name\": \"FEDORA-2021-5c9d12a93e\", \"refsource\": \"FEDORA\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/\", \"name\": \"FEDORA-2021-abbe24e41c\", \"refsource\": \"FEDORA\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujul2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpujul2022.html\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2021-45046\", \"STATE\": \"PUBLIC\", \"TITLE\": \"Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack\", \"ASSIGNER\": \"security@apache.org\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2021-45046\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-21T23:25:22.768Z\", \"dateReserved\": \"2021-12-14T00:00:00.000Z\", \"assignerOrgId\": \"f0158376-9dc2-43b6-827c-5f631a4d8d09\", \"datePublished\": \"2021-12-14T16:55:09.000Z\", \"assignerShortName\": \"apache\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
WID-SEC-W-2022-0352
Vulnerability from csaf_certbund - Published: 2021-12-14 23:00 - Updated: 2025-11-05 23:00Summary
Apache log4j: Schwachstelle ermöglicht Codeausführung
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Apache log4j ist ein Framework zum Loggen von Anwendungsmeldungen in Java.
Angriff: Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Code auszuführen.
Betroffene Betriebssysteme: - Appliance
- CISCO Appliance
- Hardware Appliance
- Juniper Appliance
- Linux
- Native Hypervisor
- NetApp Appliance
- Sonstiges
- UNIX
- Windows
Affected products
Known affected
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco WebEx Meetings Server
Cisco
|
cpe:/a:cisco:webex_meetings_server:-
|
— | |
|
Unify OpenScape Contact Center
Unify
|
cpe:/a:unify:openscape_contact_center:-
|
— | |
|
Unify OpenScape Voice
Unify
|
cpe:/a:unify:openscape_voice:-
|
— | |
|
Juniper Junos Space
Juniper
|
cpe:/a:juniper:junos_space:-
|
— | |
|
HCL Commerce Big SQL
HCL / Commerce
|
cpe:/a:hcltechsw:commerce:-
|
Big SQL | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
HCL Commerce
HCL / Commerce
|
cpe:/a:hcltechsw:commerce:-
|
— | |
|
Avaya Session Border Controller
Avaya
|
cpe:/h:avaya:session_border_controller:-
|
— | |
|
IBM Spectrum Protect
IBM
|
cpe:/a:ibm:spectrum_protect:-
|
— | |
|
VMware Cloud Foundation
VMware
|
cpe:/a:vmware:cloud_foundation:-
|
— | |
|
Citrix Systems Virtual Apps and Desktops
Citrix Systems
|
cpe:/a:citrix:virtual_apps_and_desktops:-::~~-~~~
|
— | |
|
Apache log4j <2.3.1
Apache / log4j
|
<2.3.1 | ||
|
SmartBear SoapUI
SmartBear
|
cpe:/a:smartbear:soapui:-
|
— | |
|
Avaya Aura Media Server
Avaya
|
cpe:/a:avaya:media_server:-
|
— | |
|
VMware vRealize Operations
VMware / vRealize Operations
|
cpe:/a:vmware:vrealize_operations:-
|
— | |
|
Cisco Integrated Management Controller
Cisco
|
cpe:/a:cisco:integrated_management_controller:-
|
— | |
|
VMware vRealize Log Insight
VMware
|
cpe:/a:vmware:vcenter_log_insight:-
|
— | |
|
Dell Data Protection Advisor
Dell
|
cpe:/a:dell:data_protection_advisor:-
|
— | |
|
IBM QRadar SIEM
IBM
|
cpe:/a:ibm:qradar_siem:-
|
— | |
|
Apache log4j <2.12.3
Apache / log4j
|
<2.12.3 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
VMware Carbon Black Cloud Workload
VMware
|
cpe:/a:vmware:carbon_black_cloud_workload:-
|
— | |
|
VMware Workspace One Access
VMware / Workspace One Access
|
cpe:/a:vmware:workspace_one_access:-
|
— | |
|
Avaya Aura Web Gateway
Avaya
|
cpe:/a:avaya:aura_web_gateway:-
|
— | |
|
VMware Workspace One Access Connector
VMware / Workspace One Access
|
cpe:/a:vmware:workspace_one_access:::connector
|
Connector | |
|
Avaya Analytics
Avaya
|
cpe:/a:avaya:analytics:-
|
— | |
|
EMC Data Domain
EMC
|
cpe:/o:emc:data_domain:-
|
— | |
|
VMware Identity Manager
VMware
|
cpe:/a:vmware:identity_manger:-
|
— | |
|
EMC Data Domain OS
EMC
|
cpe:/o:emc:data_domain_os:-
|
— | |
|
VMware Horizon
VMware
|
cpe:/a:vmware:horizon:-
|
— | |
|
Cisco Unified Computing System (UCS)
Cisco
|
cpe:/h:cisco:unified_computing_system:-
|
— | |
|
IBM WebSphere Application Server
IBM
|
cpe:/a:ibm:websphere_application_server:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Avaya Aura Device Services
Avaya
|
cpe:/a:avaya:aura_device_services:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Unify OpenScape UC Application
Unify
|
cpe:/a:unify:openscape_uc_application:-
|
— | |
|
VMware NSX Data Center for vSphere
VMware / NSX
|
cpe:/a:vmware:nsx_data_center:-
|
Data Center for vSphere | |
|
Cisco Emergency Responder
Cisco
|
cpe:/a:cisco:emergency_responder:-
|
— | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Unify OpenScape Mediaserver
Unify
|
cpe:/a:unify:openscape_mediaserver:-
|
— | |
|
IBM SPSS
IBM
|
cpe:/a:ibm:spss:-
|
— | |
|
IBM Security Guardium
IBM / Security Guardium
|
cpe:/a:ibm:security_guardium:-
|
— | |
|
IBM MQ Blockchain Bridge
IBM / MQ
|
cpe:/a:ibm:mq:::blockchain_bridge
|
Blockchain Bridge | |
|
Dell ECS
Dell
|
cpe:/h:dell:ecs:-
|
— | |
|
EMC Avamar
EMC
|
cpe:/a:emc:avamar:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Red Hat JBoss Enterprise Application Platform <7.1.9
Red Hat / JBoss Enterprise Application Platform
|
<7.1.9 | ||
|
Apache log4j <2.12.2
Apache / log4j
|
<2.12.2 | ||
|
Cisco Unified Intelligence Center
Cisco
|
cpe:/a:cisco:unified_intelligence_center:-
|
— | |
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:-
|
— | |
|
IBM DB2
IBM / DB2
|
cpe:/a:ibm:db2:-
|
— | |
|
IBM Tivoli Netcool/OMNIbus
IBM
|
cpe:/a:ibm:tivoli_netcool%2fomnibus:-
|
— | |
|
Cisco Video Surveillance Operations Manager
Cisco
|
cpe:/a:cisco:video_surveillance_operations_manager:-
|
— | |
|
HCL Domino
HCL
|
cpe:/a:hcltech:domino:-
|
— | |
|
Cisco Unity Connection
Cisco
|
cpe:/a:cisco:unity_connection:-
|
— | |
|
HCL Notes
HCL
|
cpe:/a:hcltech:notes:9.0
|
— | |
|
SOS GmbH JobScheduler
SOS GmbH
|
cpe:/a:sos_gmbh:jobscheduler:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Breeze Platform
Avaya
|
cpe:/a:avaya:breeze_platform:-
|
— | |
|
Wibu-Systems CodeMeter
Wibu-Systems
|
cpe:/a:wibu:codemeter:-
|
— | |
|
Cisco Unified Communications Manager (CUCM) Session Management Edition
Cisco / Unified Communications Manager (CUCM)
|
cpe:/a:cisco:unified_communications_manager:session_management_edition
|
Session Management Edition | |
|
Apache log4j <2.16.0
Apache / log4j
|
<2.16.0 | ||
|
Cisco Network Services Orchestrator
Cisco
|
cpe:/a:cisco:network_services_orchestrator:-
|
— | |
|
Cisco Identity Services Engine (ISE)
Cisco
|
cpe:/a:cisco:identity_services_engine_software:-
|
— | |
|
IBM Rational Software Architect
IBM
|
cpe:/a:ibm:rational_software_architect:-
|
— | |
|
Cisco Finesse
Cisco
|
cpe:/a:cisco:finesse:-
|
— | |
|
TIBCO Spotfire
TIBCO
|
cpe:/a:tibco:spotfire:-
|
— | |
|
Red Hat JBoss Enterprise Application Platform <7.3.12
Red Hat / JBoss Enterprise Application Platform
|
<7.3.12 | ||
|
IBM MQ
IBM / MQ
|
cpe:/a:ibm:mq:-
|
— | |
|
Cisco Nexus
Cisco
|
cpe:/h:cisco:nexus:-
|
— | |
|
Cisco Firepower
Cisco
|
cpe:/a:cisco:firepower:-
|
— | |
|
VMware vCenter Server
VMware
|
cpe:/a:vmware:vcenter_server:-
|
— | |
|
Cisco Unified Contact Center Enterprise
Cisco
|
cpe:/a:cisco:unified_contact_center_enterprise:-
|
— | |
|
Cisco Unified Communications Manager (CUCM)
Cisco / Unified Communications Manager (CUCM)
|
cpe:/a:cisco:unified_communications_manager:-
|
— | |
|
Avaya Oceana
Avaya
|
cpe:/a:avaya:oceana:-
|
— | |
|
Cisco SD-WAN
Cisco
|
cpe:/a:cisco:sd_wan:-
|
— | |
|
Apache Solr
Apache
|
cpe:/a:apache:solr:-
|
— | |
|
VMware Cloud Director Object Storage Extension
VMware / Cloud Director
|
cpe:/a:vmware:cloud_director:object_storage_extension
|
Object Storage Extension | |
|
TIBCO Managed File Transfer
TIBCO
|
cpe:/a:tibco:managed_file_transfer_internet_server:-
|
— | |
|
IBM Spectrum Scale
IBM
|
cpe:/a:ibm:spectrum_scale:-
|
— | |
|
TIBCO Spotfire Statistics Services
TIBCO
|
cpe:/a:tibco:spotfire_statistics_services:-
|
— | |
|
IBM Security Guardium Insights
IBM / Security Guardium
|
cpe:/a:ibm:security_guardium:::insights
|
Insights | |
|
IBM DB2 Big SQL
IBM / DB2
|
cpe:/a:ibm:db2:big_sql
|
Big SQL | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
VMware vRealize Operations Cloud Proxy
VMware / vRealize Operations
|
cpe:/a:vmware:vrealize_operations:::cloud_proxy
|
Cloud Proxy | |
|
VMware SD-WAN
VMware
|
cpe:/a:vmware:sd-wan_by_velocloud:-
|
— | |
|
Cisco Application Policy Infrastructure Controller
Cisco
|
cpe:/a:cisco:application_policy_infrastructure_controller:-
|
— | |
|
Cisco Unified Communications Manager IM & Presence Service
Cisco
|
cpe:/a:cisco:unified_communications_manager_im_and_presence_service:-
|
— | |
|
Cisco Unified Contact Center Express (UCCX)
Cisco
|
cpe:/a:cisco:unified_contact_center_express:-
|
— | |
|
F-Secure Policy Manager
F-Secure
|
cpe:/a:f-secure:policy_manager:-
|
— |
References
110 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Apache log4j ist ein Framework zum Loggen von Anwendungsmeldungen in Java.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Code auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Appliance\n- CISCO Appliance\n- Hardware Appliance\n- Juniper Appliance\n- Linux\n- Native Hypervisor\n- NetApp Appliance\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-0352 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0352.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-0352 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0352"
},
{
"category": "external",
"summary": "Apache Log4j Security Vulnerabilities vom 2021-12-13",
"url": "https://logging.apache.org/log4j/2.x/security.html"
},
{
"category": "external",
"summary": "Lunasec Blog \"Log4Shell Update\" vom 2021-12-14",
"url": "https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/"
},
{
"category": "external",
"summary": "HCL Article KB0095516 vom 2021-12-16",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095516"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5148 vom 2021-12-16",
"url": "https://access.redhat.com/errata/RHSA-2021:5148"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5197-1 vom 2021-12-15",
"url": "https://ubuntu.com/security/notices/USN-5197-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5106 vom 2021-12-16",
"url": "https://access.redhat.com/errata/RHSA-2021:5106"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1730 vom 2021-12-16",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1730.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6526750 vom 2021-12-16",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-log4j-affect-the-ibm-websphere-application-server-and-ibm-websphere-application-server-liberty-cve-2021-4104-cve-2021-45046/"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5022 vom 2021-12-16",
"url": "https://lists.debian.org/debian-security-announce/2021/msg00208.html"
},
{
"category": "external",
"summary": "CloudFlare Blog vom 2021-12-16",
"url": "https://blog.cloudflare.com/protection-against-cve-2021-45046-the-additional-log4j-rce-vulnerability/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5186 vom 2021-12-17",
"url": "https://access.redhat.com/errata/RHSA-2021:5186"
},
{
"category": "external",
"summary": "Cisco Security Advisory CISCO-SA-APACHE-LOG4J-QRUKNEBD vom 2021-12-17",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5183 vom 2021-12-17",
"url": "https://access.redhat.com/errata/RHSA-2021:5183"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5184 vom 2021-12-17",
"url": "https://access.redhat.com/errata/RHSA-2021:5184"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5141 vom 2021-12-16",
"url": "https://access.redhat.com/errata/RHSA-2021:5141"
},
{
"category": "external",
"summary": "Siemens Security Advisory SSA-714170 vom 2021-12-16",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:5107 vom 2021-12-16",
"url": "https://access.redhat.com/errata/RHSA-2021:5107"
},
{
"category": "external",
"summary": "Log4j Vulnerabilities Impact On Oracle E-Business Suite Analysis",
"url": "https://www.integrigy.com/security-resources/log4j-vulnerabilities-impact-oracle-e-business-suite-analysis"
},
{
"category": "external",
"summary": "Apache Log4j Security Vulnerabilities vom 2021-12-16",
"url": "https://logging.apache.org/log4j/2.x/security"
},
{
"category": "external",
"summary": "Apache Log4j Security Vulnerabilities vom 2021-12-16",
"url": "https://logging.apache.org/log4j/2.x/security.html"
},
{
"category": "external",
"summary": "Tibco Apache Log4J Vulnerability Daily Update",
"url": "https://www.tibco.com/support/notices/2021/12/apache-log4j-vulnerability-update-archive-6"
},
{
"category": "external",
"summary": "Atos Security Advisory Report - OBSO-2112-01",
"url": "https://networks.unify.com/security/advisories/OBSO-2112-01.pdf"
},
{
"category": "external",
"summary": "Avaya Product Security Apache Log4J Vulnerability vom 2021-12-17",
"url": "https://support.avaya.com/helpcenter/getGenericDetails?detailId=1399839287609"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1553 vom 2021-12-18",
"url": "https://alas.aws.amazon.com/ALAS-2021-1553.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASCORRETTO8-2021-001 vom 2021-12-20",
"url": "https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2021-001.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6527924 vom 2021-12-17",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-blockchain-bridge-dependencies-are-vulnerable-to-an-issue-in-apache-log4j-cve-2021-45046/"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2021-001 vom 2021-12-20",
"url": "https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2021-001.html"
},
{
"category": "external",
"summary": "HCL Article KB0095587 vom 2021-12-17",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095587"
},
{
"category": "external",
"summary": "Citrix Security Advisory CTX335705 vom 2021-12-20",
"url": "https://support.citrix.com/article/CTX335705"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1731 vom 2021-12-18",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1731.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-004 vom 2021-12-18",
"url": "https://alas.aws.amazon.com/AL2022/ALAS-2021-004.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6528372 vom 2021-12-21",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-cve-2021-45046/"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20211215-0001 vom 2021-12-20",
"url": "https://security.netapp.com/advisory/ntap-20211215-0001/"
},
{
"category": "external",
"summary": "Apache Log4j 2 Release Notes",
"url": "https://logging.apache.org/log4j/log4j-2.12.3/index.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6528672 vom 2021-12-22",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-log4j-affects-some-features-of-ibm-db2-cve-2021-45046-cve-2021-45105/"
},
{
"category": "external",
"summary": "Incident Report for F-Secure services",
"url": "https://status.f-secure.com/incidents/sk8vmr0h34pd"
},
{
"category": "external",
"summary": "Apache Log4j2 Advisory",
"url": "https://logging.apache.org/log4j/log4j-2.3.1/index.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6529162 vom 2021-12-22",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-apache-log4j-cve-2021-45046-impacts-ibm-qradar-user-behavior-analytics-add-on-to-ibm-qradar-siem/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6536704 vom 2021-12-23",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affects-spss-collaboration-and-deployment-services/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6536870 vom 2021-12-23",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spss-analytic-server-cve-2021-45105-and-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6536868 vom 2021-12-23",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-have-been-identified-in-apache-log4j-shipped-with-ibm-tivoli-netcool-omnibus-common-integration-libraries-cve-2021-4104-cve-2021-45046-cve-2021-44228/"
},
{
"category": "external",
"summary": "WIBU Security Advisory WIBU-211215-01 vom 2021-12-23",
"url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-211215-01.pdf"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537184 vom 2021-12-27",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-apache-log4j-vulnerabilities-cve-2021-45105-affecting-v2-16-and-cve-2021-45046-affecting-v2-15-affect-ibm-spss-statistics-server/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537182 vom 2021-12-27",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-apache-log4j-vulnerabilities-cve-2021-45105-affecting-v2-16-and-cve-2021-45046-affecting-v2-15-affect-ibm-spss-statistics-desktop/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537186 vom 2021-12-27",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-apache-log4j-vulnerabilities-cve-2021-45105-affecting-v2-16-and-cve-2021-45046-affecting-v2-15-affect-ibm-spss-statistics-subscription/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537142 vom 2021-12-25",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-vulnerable-to-a-denial-of-service-vulnerability-in-apache-log4j2-component-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537180 vom 2021-12-27",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-spss-statistics-is-vulnerable-to-denial-of-service-due-to-apache-log4j-cve-2021-45105-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537212 vom 2021-12-28",
"url": "https://www.ibm.com/blogs/psirt/security-bulletinibm-spss-modeler-is-vulnerable-to-denial-of-service-due-to-apache-log4j-cve-2021-45105-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537240 vom 2021-12-28",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affect-ibm-spectrum-protect-operations-center-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537748 vom 2021-12-31",
"url": "https://www.ibm.com/support/pages/node/6537748"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537636 vom 2022-01-04",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affect-ibm-spectrum-protect-plus-container-backup-and-restore-for-kubernetes-and-openshift-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537634 vom 2022-01-04",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-impact-ibm-spectrum-protect-plus-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6538396 vom 2022-01-06",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-impacts-ibm-spectrum-protect-backup-archive-client-and-ibm-spectrum-protect-for-virtual-environments-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537642 vom 2022-01-06",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affect-ibm-spectrum-protect-snapshot-on-windows-cve-2021-45105-and-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537640 vom 2022-01-06",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affect-ibm-spectrum-protect-for-space-management-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6537644 vom 2022-01-07",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affect-ibm-spectrum-protect-snapshot-for-vmware-cve-2021-45105-and-cve-2021-45046/"
},
{
"category": "external",
"summary": "EMC Security Advisory DSA-2021-274 vom 2022-01-09",
"url": "https://www.dell.com/support/kbdoc/de-de/000194503/dsa-2021-274-dell-emc-data-domain-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
},
{
"category": "external",
"summary": "EMC Security Advisory DSA-2021-309 vom 2022-01-09",
"url": "https://www.dell.com/support/kbdoc/de-de/000194651/dsa-2021-309-dell-emc-dpa-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
},
{
"category": "external",
"summary": "EMC Security Advisory DSA-2021-277 vom 2022-01-09",
"url": "https://www.dell.com/support/kbdoc/de-de/000194480/dsa-2021-277-dell-emc-avamar-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
},
{
"category": "external",
"summary": "HPE Security Bulletin HPESBGN04215 rev.10 vom 2022-01-08",
"url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbgn04215en_us"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6539408 vom 2022-01-11",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-log4j-affect-the-ibm-websphere-application-server-and-ibm-security-guardium-key-lifecycle-manager-cve-2021-4104-cve-2021-45046-cve-2021-45105/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6538896 vom 2022-01-12",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-blockchain-bridge-dependencies-are-vulnerable-to-an-issue-in-apache-log4j-cve-2021-45105/"
},
{
"category": "external",
"summary": "Juniper Security Bulletin JSA11287 vom 2022-01-12",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11287\u0026cat=SIRT_1"
},
{
"category": "external",
"summary": "SoapUI Release 5.6.1",
"url": "https://www.soapui.org/downloads/latest-release/release-history/"
},
{
"category": "external",
"summary": "JobScheduler Vulnerability Release 2.2.1 vom 2022-01-11",
"url": "https://kb.sos-berlin.com/display/PKB/Vulnerability+Release+2.2.1"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6540542 vom 2022-01-14",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-business-automation-workflow-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45105-and-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Advisory",
"url": "https://www.ibm.com/support/pages/node/6541182"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6541258 vom 2022-01-18",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-rational-software-architect-realtime-edition-rsa-rt-is-is-vulnerable-to-arbitrary-code-execution-and-denial-of-service-due-to-apache-log4j-cve-2021-44228-cve-2021-45046-and/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0203 vom 2022-01-20",
"url": "https://access.redhat.com/errata/RHSA-2022:0203"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0223 vom 2022-01-21",
"url": "https://access.redhat.com/errata/RHSA-2022:0223"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0083 vom 2022-01-20",
"url": "https://access.redhat.com/errata/RHSA-2022:0083"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0205 vom 2022-01-20",
"url": "https://access.redhat.com/errata/RHSA-2022:0205"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0216 vom 2022-01-20",
"url": "https://access.redhat.com/errata/RHSA-2022:0216"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0222 vom 2022-01-21",
"url": "https://access.redhat.com/errata/RHSA-2022:0222"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6549764 vom 2022-01-22",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6550462 vom 2022-01-25",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-insights-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6551118 vom 2022-01-27",
"url": "https://www.ibm.com/blogs/psirt/security-bulletinibm-db2-on-openshift-and-ibm-db2-and-db2-warehouse-on-cloud-pak-for-data-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6551310 vom 2022-01-28",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-netcool-omnibus-common-integration-libraries-is-vulnerable-to-arbitrary-code-execution-and-denial-of-service-due-to-apache-log4j-cve-2021-44228-cve-2021-45046-cve-2021/"
},
{
"category": "external",
"summary": "EMC Security Advisory DSA-2019-079 vom 2022-01-28",
"url": "https://www.dell.com/support/kbdoc/de-de/000194054/dsa-2019-079"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6551390 vom 2022-01-28",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-network-manager-ip-edition-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45105-and-cve-2021-45046/"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6552546 vom 2022-02-02",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-tivoli-netcool-omnibus-installation-contains-vulnerable-apache-log4j-code-cve-2021-44832-cve-2021-45046-cve-2021-45105/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0431 vom 2022-02-03",
"url": "https://access.redhat.com/errata/RHSA-2022:0431"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6565401 vom 2022-03-23",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-big-sql-is-vulnerable-to-arbitrary-code-execution-and-denial-of-service-due-to-apache-log4j-cve-2021-45046-cve-2021-45105/"
},
{
"category": "external",
"summary": "HCL Article KB0097299 vom 2022-03-23",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097299"
},
{
"category": "external",
"summary": "HCL Article KB0097470 vom 2022-03-25",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097470"
},
{
"category": "external",
"summary": "HCL Article KB0096807 vom 2022-03-29",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0096807"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6568843 vom 2022-04-02",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-informix-dynamic-server-in-cloud-pak-for-data-is-vulnerable-to-denial-of-service-and-arbitrary-code-execution-due-to-apache-log4j-cve-2021-45105-cve-2021-45046/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:1299 vom 2022-04-11",
"url": "https://access.redhat.com/errata/RHSA-2022:1299"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:1296 vom 2022-04-11",
"url": "https://access.redhat.com/errata/RHSA-2022:1296"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:1297 vom 2022-04-11",
"url": "https://access.redhat.com/errata/RHSA-2022:1297"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6572685 vom 2022-04-16",
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-informix-dynamic-server-is-vulnerable-to-denial-of-service-cve-2021-45105-and-remote-code-execution-cve-2021-45046-due-to-apache-log4j/"
},
{
"category": "external",
"summary": "HCL Article KB0097650 vom 2022-04-23",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097650"
},
{
"category": "external",
"summary": "HCL Article KB0097639 vom 2022-04-23",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097639"
},
{
"category": "external",
"summary": "AVAYA Security Advisory ASA-2022-001 vom 2022-04-25",
"url": "https://downloads.avaya.com/css/P8/documents/101081576"
},
{
"category": "external",
"summary": "HCL Article KB0097787 vom 2022-04-28",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097787"
},
{
"category": "external",
"summary": "HCL Article KB0097471 vom 2022-05-18",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097471"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2022-1601 vom 2022-06-15",
"url": "https://alas.aws.amazon.com/ALAS-2022-1601.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2022-1806 vom 2022-06-15",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1806.html"
},
{
"category": "external",
"summary": "HCL Article KB0099131 vom 2022-07-24",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099131"
},
{
"category": "external",
"summary": "HCL Article KB0099671 vom 2022-07-24",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099671"
},
{
"category": "external",
"summary": "HCL Article KB0099128 vom 2022-07-24",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099128"
},
{
"category": "external",
"summary": "HCL Article KB0099667 vom 2022-08-13",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099667"
},
{
"category": "external",
"summary": "HCL Article KB0099669 vom 2022-08-13",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099669"
},
{
"category": "external",
"summary": "HCL Article KB0100505 vom 2022-09-21",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0100505"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2022-225 vom 2022-12-09",
"url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-225.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:1747 vom 2025-02-24",
"url": "https://access.redhat.com/errata/RHSA-2025:1747"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:1746 vom 2025-02-24",
"url": "https://access.redhat.com/errata/RHSA-2025:1746"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2021-273 vom 2025-11-05",
"url": "https://www.dell.com/support/kbdoc/de-de/000194612/dsa-2021-273-dell-emc-ecs-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
}
],
"source_lang": "en-US",
"title": "Apache log4j: Schwachstelle erm\u00f6glicht Codeausf\u00fchrung",
"tracking": {
"current_release_date": "2025-11-05T23:00:00.000+00:00",
"generator": {
"date": "2025-11-06T09:37:09.479+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2022-0352",
"initial_release_date": "2021-12-14T23:00:00.000+00:00",
"revision_history": [
{
"date": "2021-12-14T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2021-12-15T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von HCL, Red Hat, Ubuntu, Amazon und IBM aufgenommen"
},
{
"date": "2021-12-16T23:00:00.000+00:00",
"number": "3",
"summary": "Anpassung auf Codeausf\u00fchrung, Hinweis auf Ausnutzung, neue Updates und betroffene Produkte aufgenommen"
},
{
"date": "2021-12-19T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Amazon, IBM, HCL und Citrix aufgenommen"
},
{
"date": "2021-12-20T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von IBM und NetApp aufgenommen"
},
{
"date": "2021-12-21T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2021-12-22T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2021-12-23T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von WIBU-SYSTEMS aufgenommen"
},
{
"date": "2021-12-26T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2021-12-27T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-02T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-03T23:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-05T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-06T23:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von IBM und Cisco aufgenommen"
},
{
"date": "2022-01-09T23:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von EMC und HP aufgenommen"
},
{
"date": "2022-01-10T23:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-11T23:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-12T23:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Juniper, SmartBear und SOS GmbH aufgenommen"
},
{
"date": "2022-01-13T23:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-16T23:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-17T23:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-19T23:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-01-20T23:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-01-23T23:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-24T23:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-26T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-01-27T23:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von IBM und EMC aufgenommen"
},
{
"date": "2022-02-01T23:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-02-03T23:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-03-22T23:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-03-24T23:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-03-29T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-04-03T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-04-11T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-04-18T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2022-04-24T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-04-26T22:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von AVAYA aufgenommen"
},
{
"date": "2022-04-27T22:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-05-17T22:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-06-16T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-07-24T22:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-08-14T22:00:00.000+00:00",
"number": "42",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-09-20T22:00:00.000+00:00",
"number": "43",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2022-12-11T23:00:00.000+00:00",
"number": "44",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2025-02-23T23:00:00.000+00:00",
"number": "45",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-11-05T23:00:00.000+00:00",
"number": "46",
"summary": "Neue Updates von Dell aufgenommen"
}
],
"status": "final",
"version": "46"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Apache Solr",
"product": {
"name": "Apache Solr",
"product_id": "T021248",
"product_identification_helper": {
"cpe": "cpe:/a:apache:solr:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.12.2",
"product": {
"name": "Apache log4j \u003c2.12.2",
"product_id": "T021307"
}
},
{
"category": "product_version",
"name": "2.12.2",
"product": {
"name": "Apache log4j 2.12.2",
"product_id": "T021307-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:apache:log4j:2.12.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.16.0",
"product": {
"name": "Apache log4j \u003c2.16.0",
"product_id": "T021308"
}
},
{
"category": "product_version",
"name": "2.16.0",
"product": {
"name": "Apache log4j 2.16.0",
"product_id": "T021308-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:apache:log4j:2.16.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.3.1",
"product": {
"name": "Apache log4j \u003c2.3.1",
"product_id": "T021413"
}
},
{
"category": "product_version",
"name": "2.3.1",
"product": {
"name": "Apache log4j 2.3.1",
"product_id": "T021413-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:apache:log4j:2.3.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.12.3",
"product": {
"name": "Apache log4j \u003c2.12.3",
"product_id": "T021414"
}
},
{
"category": "product_version",
"name": "2.12.3",
"product": {
"name": "Apache log4j 2.12.3",
"product_id": "T021414-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:apache:log4j:2.12.3"
}
}
}
],
"category": "product_name",
"name": "log4j"
}
],
"category": "vendor",
"name": "Apache"
},
{
"branches": [
{
"category": "product_name",
"name": "Avaya Analytics",
"product": {
"name": "Avaya Analytics",
"product_id": "T021375",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:analytics:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Application Enablement Services",
"product": {
"name": "Avaya Aura Application Enablement Services",
"product_id": "T015516",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Device Services",
"product": {
"name": "Avaya Aura Device Services",
"product_id": "T015517",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_device_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Media Server",
"product": {
"name": "Avaya Aura Media Server",
"product_id": "1017",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:media_server:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Session Manager",
"product": {
"name": "Avaya Aura Session Manager",
"product_id": "T015127",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:session_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura System Manager",
"product": {
"name": "Avaya Aura System Manager",
"product_id": "T015518",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_system_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Web Gateway",
"product": {
"name": "Avaya Aura Web Gateway",
"product_id": "T021376",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_web_gateway:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Breeze Platform",
"product": {
"name": "Avaya Breeze Platform",
"product_id": "T015823",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:breeze_platform:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Oceana",
"product": {
"name": "Avaya Oceana",
"product_id": "T016589",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:oceana:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Session Border Controller",
"product": {
"name": "Avaya Session Border Controller",
"product_id": "T015520",
"product_identification_helper": {
"cpe": "cpe:/h:avaya:session_border_controller:-"
}
}
}
],
"category": "vendor",
"name": "Avaya"
},
{
"branches": [
{
"category": "product_name",
"name": "Cisco Application Policy Infrastructure Controller",
"product": {
"name": "Cisco Application Policy Infrastructure Controller",
"product_id": "778219",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:application_policy_infrastructure_controller:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Emergency Responder",
"product": {
"name": "Cisco Emergency Responder",
"product_id": "2040",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:emergency_responder:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Finesse",
"product": {
"name": "Cisco Finesse",
"product_id": "199167",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:finesse:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Firepower",
"product": {
"name": "Cisco Firepower",
"product_id": "T011337",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:firepower:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Identity Services Engine (ISE)",
"product": {
"name": "Cisco Identity Services Engine (ISE)",
"product_id": "T000612",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:identity_services_engine_software:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Integrated Management Controller",
"product": {
"name": "Cisco Integrated Management Controller",
"product_id": "T014392",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:integrated_management_controller:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Network Services Orchestrator",
"product": {
"name": "Cisco Network Services Orchestrator",
"product_id": "T021358",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:network_services_orchestrator:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus",
"product": {
"name": "Cisco Nexus",
"product_id": "T013714",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus:-"
}
}
},
{
"category": "product_name",
"name": "Cisco SD-WAN",
"product": {
"name": "Cisco SD-WAN",
"product_id": "T015770",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:sd_wan:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Cisco Unified Communications Manager (CUCM)",
"product": {
"name": "Cisco Unified Communications Manager (CUCM)",
"product_id": "2142",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_communications_manager:-"
}
}
},
{
"category": "product_version",
"name": "Session Management Edition",
"product": {
"name": "Cisco Unified Communications Manager (CUCM) Session Management Edition",
"product_id": "T016315",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_communications_manager:session_management_edition"
}
}
}
],
"category": "product_name",
"name": "Unified Communications Manager (CUCM)"
},
{
"category": "product_name",
"name": "Cisco Unified Communications Manager IM \u0026 Presence Service",
"product": {
"name": "Cisco Unified Communications Manager IM \u0026 Presence Service",
"product_id": "915287",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_communications_manager_im_and_presence_service:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Computing System (UCS)",
"product": {
"name": "Cisco Unified Computing System (UCS)",
"product_id": "163824",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:unified_computing_system:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Contact Center Enterprise",
"product": {
"name": "Cisco Unified Contact Center Enterprise",
"product_id": "2143",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_contact_center_enterprise:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Contact Center Express (UCCX)",
"product": {
"name": "Cisco Unified Contact Center Express (UCCX)",
"product_id": "915286",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_contact_center_express:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Intelligence Center",
"product": {
"name": "Cisco Unified Intelligence Center",
"product_id": "T018811",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_intelligence_center:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unity Connection",
"product": {
"name": "Cisco Unity Connection",
"product_id": "T002044",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unity_connection:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Video Surveillance Operations Manager",
"product": {
"name": "Cisco Video Surveillance Operations Manager",
"product_id": "196088",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:video_surveillance_operations_manager:-"
}
}
},
{
"category": "product_name",
"name": "Cisco WebEx Meetings Server",
"product": {
"name": "Cisco WebEx Meetings Server",
"product_id": "T001160",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:webex_meetings_server:-"
}
}
}
],
"category": "vendor",
"name": "Cisco"
},
{
"branches": [
{
"category": "product_name",
"name": "Citrix Systems Virtual Apps and Desktops",
"product": {
"name": "Citrix Systems Virtual Apps and Desktops",
"product_id": "876876",
"product_identification_helper": {
"cpe": "cpe:/a:citrix:virtual_apps_and_desktops:-::~~-~~~"
}
}
}
],
"category": "vendor",
"name": "Citrix Systems"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Dell Data Protection Advisor",
"product": {
"name": "Dell Data Protection Advisor",
"product_id": "T021498",
"product_identification_helper": {
"cpe": "cpe:/a:dell:data_protection_advisor:-"
}
}
},
{
"category": "product_name",
"name": "Dell ECS",
"product": {
"name": "Dell ECS",
"product_id": "T048328",
"product_identification_helper": {
"cpe": "cpe:/h:dell:ecs:-"
}
}
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC Avamar",
"product": {
"name": "EMC Avamar",
"product_id": "T014381",
"product_identification_helper": {
"cpe": "cpe:/a:emc:avamar:-"
}
}
},
{
"category": "product_name",
"name": "EMC Data Domain",
"product": {
"name": "EMC Data Domain",
"product_id": "T021496",
"product_identification_helper": {
"cpe": "cpe:/o:emc:data_domain:-"
}
}
},
{
"category": "product_name",
"name": "EMC Data Domain OS",
"product": {
"name": "EMC Data Domain OS",
"product_id": "T006099",
"product_identification_helper": {
"cpe": "cpe:/o:emc:data_domain_os:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "F-Secure Policy Manager",
"product": {
"name": "F-Secure Policy Manager",
"product_id": "T021242",
"product_identification_helper": {
"cpe": "cpe:/a:f-secure:policy_manager:-"
}
}
}
],
"category": "vendor",
"name": "F-Secure"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "HCL Commerce",
"product": {
"name": "HCL Commerce",
"product_id": "T019293",
"product_identification_helper": {
"cpe": "cpe:/a:hcltechsw:commerce:-"
}
}
},
{
"category": "product_version",
"name": "Big SQL",
"product": {
"name": "HCL Commerce Big SQL",
"product_id": "T019294",
"product_identification_helper": {
"cpe": "cpe:/a:hcltechsw:commerce:-"
}
}
}
],
"category": "product_name",
"name": "Commerce"
},
{
"category": "product_name",
"name": "HCL Domino",
"product": {
"name": "HCL Domino",
"product_id": "777623",
"product_identification_helper": {
"cpe": "cpe:/a:hcltech:domino:-"
}
}
},
{
"category": "product_name",
"name": "HCL Notes",
"product": {
"name": "HCL Notes",
"product_id": "763192",
"product_identification_helper": {
"cpe": "cpe:/a:hcltech:notes:9.0"
}
}
}
],
"category": "vendor",
"name": "HCL"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM Business Automation Workflow",
"product": {
"name": "IBM Business Automation Workflow",
"product_id": "T019704",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "IBM DB2",
"product": {
"name": "IBM DB2",
"product_id": "5104",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:db2:-"
}
}
},
{
"category": "product_version",
"name": "Big SQL",
"product": {
"name": "IBM DB2 Big SQL",
"product_id": "T022379",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:db2:big_sql"
}
}
}
],
"category": "product_name",
"name": "DB2"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM MQ",
"product": {
"name": "IBM MQ",
"product_id": "T021398",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:mq:-"
}
}
},
{
"category": "product_version",
"name": "Blockchain Bridge",
"product": {
"name": "IBM MQ Blockchain Bridge",
"product_id": "T021543",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:mq:::blockchain_bridge"
}
}
}
],
"category": "product_name",
"name": "MQ"
},
{
"category": "product_name",
"name": "IBM QRadar SIEM",
"product": {
"name": "IBM QRadar SIEM",
"product_id": "T021415",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:-"
}
}
},
{
"category": "product_name",
"name": "IBM Rational Software Architect",
"product": {
"name": "IBM Rational Software Architect",
"product_id": "T005181",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:rational_software_architect:-"
}
}
},
{
"category": "product_name",
"name": "IBM SPSS",
"product": {
"name": "IBM SPSS",
"product_id": "T013570",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spss:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "IBM Security Guardium",
"product": {
"name": "IBM Security Guardium",
"product_id": "T021345",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:-"
}
}
},
{
"category": "product_version",
"name": "Insights",
"product": {
"name": "IBM Security Guardium Insights",
"product_id": "T021405",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:::insights"
}
}
}
],
"category": "product_name",
"name": "Security Guardium"
},
{
"category": "product_name",
"name": "IBM Spectrum Protect",
"product": {
"name": "IBM Spectrum Protect",
"product_id": "T013661",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spectrum_protect:-"
}
}
},
{
"category": "product_name",
"name": "IBM Spectrum Scale",
"product": {
"name": "IBM Spectrum Scale",
"product_id": "T019402",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spectrum_scale:-"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Netcool/OMNIbus",
"product": {
"name": "IBM Tivoli Netcool/OMNIbus",
"product_id": "T004181",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_netcool%2fomnibus:-"
}
}
},
{
"category": "product_name",
"name": "IBM WebSphere Application Server",
"product": {
"name": "IBM WebSphere Application Server",
"product_id": "5198",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Juniper Junos Space",
"product": {
"name": "Juniper Junos Space",
"product_id": "T003343",
"product_identification_helper": {
"cpe": "cpe:/a:juniper:junos_space:-"
}
}
}
],
"category": "vendor",
"name": "Juniper"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp ActiveIQ Unified Manager",
"product": {
"name": "NetApp ActiveIQ Unified Manager",
"product_id": "T016960",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.3.12",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform \u003c7.3.12",
"product_id": "T041369"
}
},
{
"category": "product_version",
"name": "7.3.12",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.3.12",
"product_id": "T041369-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.3.12"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.1.9",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform \u003c7.1.9",
"product_id": "T041370"
}
},
{
"category": "product_version",
"name": "7.1.9",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1.9",
"product_id": "T041370-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1.9"
}
}
}
],
"category": "product_name",
"name": "JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SOS GmbH JobScheduler",
"product": {
"name": "SOS GmbH JobScheduler",
"product_id": "T021263",
"product_identification_helper": {
"cpe": "cpe:/a:sos_gmbh:jobscheduler:-"
}
}
}
],
"category": "vendor",
"name": "SOS GmbH"
},
{
"branches": [
{
"category": "product_name",
"name": "SmartBear SoapUI",
"product": {
"name": "SmartBear SoapUI",
"product_id": "T021577",
"product_identification_helper": {
"cpe": "cpe:/a:smartbear:soapui:-"
}
}
}
],
"category": "vendor",
"name": "SmartBear"
},
{
"branches": [
{
"category": "product_name",
"name": "TIBCO Managed File Transfer",
"product": {
"name": "TIBCO Managed File Transfer",
"product_id": "T021367",
"product_identification_helper": {
"cpe": "cpe:/a:tibco:managed_file_transfer_internet_server:-"
}
}
},
{
"category": "product_name",
"name": "TIBCO Spotfire",
"product": {
"name": "TIBCO Spotfire",
"product_id": "T009185",
"product_identification_helper": {
"cpe": "cpe:/a:tibco:spotfire:-"
}
}
},
{
"category": "product_name",
"name": "TIBCO Spotfire Statistics Services",
"product": {
"name": "TIBCO Spotfire Statistics Services",
"product_id": "T021366",
"product_identification_helper": {
"cpe": "cpe:/a:tibco:spotfire_statistics_services:-"
}
}
}
],
"category": "vendor",
"name": "TIBCO"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
},
{
"branches": [
{
"category": "product_name",
"name": "Unify OpenScape Contact Center",
"product": {
"name": "Unify OpenScape Contact Center",
"product_id": "T008876",
"product_identification_helper": {
"cpe": "cpe:/a:unify:openscape_contact_center:-"
}
}
},
{
"category": "product_name",
"name": "Unify OpenScape Mediaserver",
"product": {
"name": "Unify OpenScape Mediaserver",
"product_id": "T018253",
"product_identification_helper": {
"cpe": "cpe:/a:unify:openscape_mediaserver:-"
}
}
},
{
"category": "product_name",
"name": "Unify OpenScape UC Application",
"product": {
"name": "Unify OpenScape UC Application",
"product_id": "T015712",
"product_identification_helper": {
"cpe": "cpe:/a:unify:openscape_uc_application:-"
}
}
},
{
"category": "product_name",
"name": "Unify OpenScape Voice",
"product": {
"name": "Unify OpenScape Voice",
"product_id": "T008873",
"product_identification_helper": {
"cpe": "cpe:/a:unify:openscape_voice:-"
}
}
}
],
"category": "vendor",
"name": "Unify"
},
{
"branches": [
{
"category": "product_name",
"name": "VMware Carbon Black Cloud Workload",
"product": {
"name": "VMware Carbon Black Cloud Workload",
"product_id": "950382",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:carbon_black_cloud_workload:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "Object Storage Extension",
"product": {
"name": "VMware Cloud Director Object Storage Extension",
"product_id": "T021402",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:cloud_director:object_storage_extension"
}
}
}
],
"category": "product_name",
"name": "Cloud Director"
},
{
"category": "product_name",
"name": "VMware Cloud Foundation",
"product": {
"name": "VMware Cloud Foundation",
"product_id": "658718",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:cloud_foundation:-"
}
}
},
{
"category": "product_name",
"name": "VMware Horizon",
"product": {
"name": "VMware Horizon",
"product_id": "T021252",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:horizon:-"
}
}
},
{
"category": "product_name",
"name": "VMware Identity Manager",
"product": {
"name": "VMware Identity Manager",
"product_id": "T021253",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:identity_manger:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "Data Center for vSphere",
"product": {
"name": "VMware NSX Data Center for vSphere",
"product_id": "393634",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:nsx_data_center:-"
}
}
}
],
"category": "product_name",
"name": "NSX"
},
{
"category": "product_name",
"name": "VMware SD-WAN",
"product": {
"name": "VMware SD-WAN",
"product_id": "T021403",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:sd-wan_by_velocloud:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "Connector",
"product": {
"name": "VMware Workspace One Access Connector",
"product_id": "T021254",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:workspace_one_access:::connector"
}
}
},
{
"category": "product_name",
"name": "VMware Workspace One Access",
"product": {
"name": "VMware Workspace One Access",
"product_id": "T021255",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:workspace_one_access:-"
}
}
}
],
"category": "product_name",
"name": "Workspace One Access"
},
{
"category": "product_name",
"name": "VMware vCenter Server",
"product": {
"name": "VMware vCenter Server",
"product_id": "T012302",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:vcenter_server:-"
}
}
},
{
"category": "product_name",
"name": "VMware vRealize Log Insight",
"product": {
"name": "VMware vRealize Log Insight",
"product_id": "T021256",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:vcenter_log_insight:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "VMware vRealize Operations",
"product": {
"name": "VMware vRealize Operations",
"product_id": "T021257",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:vrealize_operations:-"
}
}
},
{
"category": "product_version",
"name": "Cloud Proxy",
"product": {
"name": "VMware vRealize Operations Cloud Proxy",
"product_id": "T021404",
"product_identification_helper": {
"cpe": "cpe:/a:vmware:vrealize_operations:::cloud_proxy"
}
}
}
],
"category": "product_name",
"name": "vRealize Operations"
}
],
"category": "vendor",
"name": "VMware"
},
{
"branches": [
{
"category": "product_name",
"name": "Wibu-Systems CodeMeter",
"product": {
"name": "Wibu-Systems CodeMeter",
"product_id": "812997",
"product_identification_helper": {
"cpe": "cpe:/a:wibu:codemeter:-"
}
}
}
],
"category": "vendor",
"name": "Wibu-Systems"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-45046",
"product_status": {
"known_affected": [
"T001160",
"T008876",
"T008873",
"T003343",
"T019294",
"T015127",
"T019293",
"T015520",
"T013661",
"658718",
"876876",
"T021413",
"T021577",
"1017",
"T021257",
"T014392",
"T021256",
"T021498",
"T021415",
"T021414",
"398363",
"950382",
"T021255",
"T021376",
"T021254",
"T021375",
"T021496",
"T021253",
"T006099",
"T021252",
"163824",
"5198",
"T015518",
"T015517",
"T015516",
"T015712",
"393634",
"2040",
"T016960",
"T018253",
"T013570",
"T021345",
"T021543",
"T048328",
"T014381",
"2951",
"T041370",
"T021307",
"T018811",
"T019704",
"5104",
"T004181",
"196088",
"777623",
"T002044",
"763192",
"T021263",
"67646",
"T015823",
"812997",
"T016315",
"T021308",
"T021358",
"T000612",
"T005181",
"199167",
"T009185",
"T041369",
"T021398",
"T013714",
"T011337",
"T012302",
"2143",
"2142",
"T016589",
"T015770",
"T021248",
"T021402",
"T021367",
"T019402",
"T021366",
"T021405",
"T022379",
"T000126",
"T021404",
"T021403",
"778219",
"915287",
"915286",
"T021242"
]
},
"release_date": "2021-12-14T23:00:00.000+00:00",
"title": "CVE-2021-45046"
}
]
}
WID-SEC-W-2023-0063
Vulnerability from csaf_certbund - Published: 2022-01-12 23:00 - Updated: 2025-10-08 22:00Summary
Juniper Junos Space: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Junos Space ist eine Software-Plattform, die eine Reihe von Applikationen für das Netzwerkmanagement beinhaltet.
Angriff: Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.
Betroffene Betriebssysteme: - Juniper Appliance
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper Junos Space <21.3R1
Juniper / Junos Space
|
<21.3R1 | ||
|
Juniper Junos Space Security Director <24.1R4
Juniper / Junos Space
|
Security Director <24.1R4 | ||
|
Juniper Contrail Service Orchestration
Juniper
|
cpe:/a:juniper:contrail_service_orchestration:-
|
— |
References
5 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Junos Space ist eine Software-Plattform, die eine Reihe von Applikationen f\u00fcr das Netzwerkmanagement beinhaltet.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren und seine Privilegien zu erweitern.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Juniper Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0063 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2023-0063.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0063 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0063"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2022-01-12",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11287\u0026cat=SIRT_1"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA70182 vom 2023-01-12",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Contrail-Service-Orchestration-Multiple-vulnerabilities-resolved-in-CSO-6-3-0?language=en_US"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA103138 vom 2024-10-08",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Security-Director-Multiple-vulnerabilities-resolved-in-24-1R4-by-upgrading-Log4j-Java-library-to-2-23-1-and-ElasticSearch-to-6-8-17"
}
],
"source_lang": "en-US",
"title": "Juniper Junos Space: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-10-08T22:00:00.000+00:00",
"generator": {
"date": "2025-10-09T07:39:55.488+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2023-0063",
"initial_release_date": "2022-01-12T23:00:00.000+00:00",
"revision_history": [
{
"date": "2022-01-12T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-01-11T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Juniper aufgenommen"
},
{
"date": "2025-10-08T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Juniper aufgenommen"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Juniper Contrail Service Orchestration",
"product": {
"name": "Juniper Contrail Service Orchestration",
"product_id": "T025794",
"product_identification_helper": {
"cpe": "cpe:/a:juniper:contrail_service_orchestration:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c21.3R1",
"product": {
"name": "Juniper Junos Space \u003c21.3R1",
"product_id": "T021576"
}
},
{
"category": "product_version",
"name": "21.3R1",
"product": {
"name": "Juniper Junos Space 21.3R1",
"product_id": "T021576-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:juniper:junos_space:21.3r1"
}
}
},
{
"category": "product_version_range",
"name": "Security Director \u003c24.1R4",
"product": {
"name": "Juniper Junos Space Security Director \u003c24.1R4",
"product_id": "T047484"
}
},
{
"category": "product_version",
"name": "Security Director 24.1R4",
"product": {
"name": "Juniper Junos Space Security Director 24.1R4",
"product_id": "T047484-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:juniper:junos_space:24.1r4::security_director"
}
}
}
],
"category": "product_name",
"name": "Junos Space"
}
],
"category": "vendor",
"name": "Juniper"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17543",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2019-17543"
},
{
"cve": "CVE-2019-20934",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2019-20934"
},
{
"cve": "CVE-2020-0543",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-0543"
},
{
"cve": "CVE-2020-0548",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-0548"
},
{
"cve": "CVE-2020-0549",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-0549"
},
{
"cve": "CVE-2020-11022",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-11022"
},
{
"cve": "CVE-2020-11023",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-11023"
},
{
"cve": "CVE-2020-11668",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-11668"
},
{
"cve": "CVE-2020-11984",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-11984"
},
{
"cve": "CVE-2020-11993",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-11993"
},
{
"cve": "CVE-2020-12362",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-12362"
},
{
"cve": "CVE-2020-12363",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-12363"
},
{
"cve": "CVE-2020-12364",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-12364"
},
{
"cve": "CVE-2020-1927",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-1927"
},
{
"cve": "CVE-2020-1934",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-1934"
},
{
"cve": "CVE-2020-24489",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-24489"
},
{
"cve": "CVE-2020-24511",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-24511"
},
{
"cve": "CVE-2020-24512",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-24512"
},
{
"cve": "CVE-2020-27170",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-27170"
},
{
"cve": "CVE-2020-27777",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-27777"
},
{
"cve": "CVE-2020-29443",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-29443"
},
{
"cve": "CVE-2020-8625",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-8625"
},
{
"cve": "CVE-2020-8648",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-8648"
},
{
"cve": "CVE-2020-8695",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-8695"
},
{
"cve": "CVE-2020-8696",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-8696"
},
{
"cve": "CVE-2020-8698",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-8698"
},
{
"cve": "CVE-2020-9490",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2020-9490"
},
{
"cve": "CVE-2021-20254",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-20254"
},
{
"cve": "CVE-2021-22555",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-22555"
},
{
"cve": "CVE-2021-22901",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-22901"
},
{
"cve": "CVE-2021-2341",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2341"
},
{
"cve": "CVE-2021-2342",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2342"
},
{
"cve": "CVE-2021-2356",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2356"
},
{
"cve": "CVE-2021-2369",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2369"
},
{
"cve": "CVE-2021-2372",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2372"
},
{
"cve": "CVE-2021-2385",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2385"
},
{
"cve": "CVE-2021-2388",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2388"
},
{
"cve": "CVE-2021-2389",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2389"
},
{
"cve": "CVE-2021-2390",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-2390"
},
{
"cve": "CVE-2021-25214",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-25214"
},
{
"cve": "CVE-2021-25217",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-25217"
},
{
"cve": "CVE-2021-27219",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-27219"
},
{
"cve": "CVE-2021-29154",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-29154"
},
{
"cve": "CVE-2021-29650",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-29650"
},
{
"cve": "CVE-2021-31535",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-31535"
},
{
"cve": "CVE-2021-32399",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-32399"
},
{
"cve": "CVE-2021-33033",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-33033"
},
{
"cve": "CVE-2021-33034",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-33034"
},
{
"cve": "CVE-2021-3347",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-3347"
},
{
"cve": "CVE-2021-33909",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-33909"
},
{
"cve": "CVE-2021-3653",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-3653"
},
{
"cve": "CVE-2021-3656",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-3656"
},
{
"cve": "CVE-2021-3715",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-3715"
},
{
"cve": "CVE-2021-37576",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-37576"
},
{
"cve": "CVE-2021-4104",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-4104"
},
{
"cve": "CVE-2021-42550",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-42550"
},
{
"cve": "CVE-2021-44228",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-44228"
},
{
"cve": "CVE-2021-45046",
"product_status": {
"known_affected": [
"T021576",
"T047484",
"T025794"
]
},
"release_date": "2022-01-12T23:00:00.000+00:00",
"title": "CVE-2021-45046"
}
]
}
WID-SEC-W-2026-1203
Vulnerability from csaf_certbund - Published: 2026-04-21 22:00 - Updated: 2026-04-21 22:00Summary
Oracle Fusion Middleware: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Oracle Fusion Middleware bündelt mehrere Produkte zur Erstellung, Betrieb und Management von intelligenten Business Anwendungen.
Angriff: Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme: - Linux
- Sonstiges
- UNIX
- Windows
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Fusion Middleware 12.1.3.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.1.3.0.0
|
12.1.3.0.0 | |
|
Oracle Fusion Middleware 14.1.2.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.1.0
|
14.1.2.1.0 | |
|
Oracle Fusion Middleware 8.5.8
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:8.5.8
|
8.5.8 | |
|
Oracle Fusion Middleware 14.1.2.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.2.0.0
|
14.1.2.0.0 | |
|
Oracle Fusion Middleware 12.2.1.4.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:12.2.1.4.0
|
12.2.1.4.0 | |
|
Oracle Fusion Middleware 15.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:15.1.1.0.0
|
15.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.0
|
22.1.0 | |
|
Oracle Fusion Middleware 14.1.1.0.0
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:14.1.1.0.0
|
14.1.1.0.0 | |
|
Oracle Fusion Middleware 22.1.1
Oracle / Fusion Middleware
|
cpe:/a:oracle:fusion_middleware:22.1.1
|
22.1.1 |
References
3 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Oracle Fusion Middleware b\u00fcndelt mehrere Produkte zur Erstellung, Betrieb und Management von intelligenten Business Anwendungen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1203 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1203.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1203 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1203"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - April 2026 - Appendix Oracle Fusion Middleware vom 2026-04-21",
"url": "https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixFMW"
}
],
"source_lang": "en-US",
"title": "Oracle Fusion Middleware: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-04-21T22:00:00.000+00:00",
"generator": {
"date": "2026-04-22T08:49:38.656+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2026-1203",
"initial_release_date": "2026-04-21T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-04-21T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "12.2.1.4.0",
"product": {
"name": "Oracle Fusion Middleware 12.2.1.4.0",
"product_id": "751674",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:12.2.1.4.0"
}
}
},
{
"category": "product_version",
"name": "14.1.1.0.0",
"product": {
"name": "Oracle Fusion Middleware 14.1.1.0.0",
"product_id": "829576",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:14.1.1.0.0"
}
}
},
{
"category": "product_version",
"name": "12.1.3.0.0",
"product": {
"name": "Oracle Fusion Middleware 12.1.3.0.0",
"product_id": "T018993",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:12.1.3.0.0"
}
}
},
{
"category": "product_version",
"name": "14.1.2.0.0",
"product": {
"name": "Oracle Fusion Middleware 14.1.2.0.0",
"product_id": "T040467",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:14.1.2.0.0"
}
}
},
{
"category": "product_version",
"name": "14.1.2.1.0",
"product": {
"name": "Oracle Fusion Middleware 14.1.2.1.0",
"product_id": "T047913",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:14.1.2.1.0"
}
}
},
{
"category": "product_version",
"name": "8.5.8",
"product": {
"name": "Oracle Fusion Middleware 8.5.8",
"product_id": "T047914",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:8.5.8"
}
}
},
{
"category": "product_version",
"name": "15.1.1.0.0",
"product": {
"name": "Oracle Fusion Middleware 15.1.1.0.0",
"product_id": "T050142",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:15.1.1.0.0"
}
}
},
{
"category": "product_version",
"name": "22.1.0",
"product": {
"name": "Oracle Fusion Middleware 22.1.0",
"product_id": "T053101",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:22.1.0"
}
}
},
{
"category": "product_version",
"name": "22.1.1",
"product": {
"name": "Oracle Fusion Middleware 22.1.1",
"product_id": "T053102",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:fusion_middleware:22.1.1"
}
}
}
],
"category": "product_name",
"name": "Fusion Middleware"
}
],
"category": "vendor",
"name": "Oracle"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-22573",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2021-22573"
},
{
"cve": "CVE-2021-45046",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2021-45046"
},
{
"cve": "CVE-2022-45047",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2022-45047"
},
{
"cve": "CVE-2023-2976",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2023-2976"
},
{
"cve": "CVE-2024-13009",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2024-13009"
},
{
"cve": "CVE-2024-29857",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2024-29857"
},
{
"cve": "CVE-2024-31573",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2024-31573"
},
{
"cve": "CVE-2024-43394",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2024-43394"
},
{
"cve": "CVE-2025-0725",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-0725"
},
{
"cve": "CVE-2025-12383",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-12383"
},
{
"cve": "CVE-2025-31672",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-31672"
},
{
"cve": "CVE-2025-33042",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-33042"
},
{
"cve": "CVE-2025-35036",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-35036"
},
{
"cve": "CVE-2025-41249",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-41249"
},
{
"cve": "CVE-2025-41254",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-41254"
},
{
"cve": "CVE-2025-46392",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-46392"
},
{
"cve": "CVE-2025-48924",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-48924"
},
{
"cve": "CVE-2025-52999",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-52999"
},
{
"cve": "CVE-2025-53864",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-53864"
},
{
"cve": "CVE-2025-58098",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-58098"
},
{
"cve": "CVE-2025-59775",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-59775"
},
{
"cve": "CVE-2025-65082",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-65082"
},
{
"cve": "CVE-2025-68161",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-68161"
},
{
"cve": "CVE-2025-68431",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-68431"
},
{
"cve": "CVE-2025-68615",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-68615"
},
{
"cve": "CVE-2025-8916",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2025-8916"
},
{
"cve": "CVE-2026-21939",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-21939"
},
{
"cve": "CVE-2026-22184",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-22184"
},
{
"cve": "CVE-2026-25210",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-25210"
},
{
"cve": "CVE-2026-25646",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-25646"
},
{
"cve": "CVE-2026-34283",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34283"
},
{
"cve": "CVE-2026-34284",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34284"
},
{
"cve": "CVE-2026-34285",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34285"
},
{
"cve": "CVE-2026-34286",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34286"
},
{
"cve": "CVE-2026-34287",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34287"
},
{
"cve": "CVE-2026-34288",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34288"
},
{
"cve": "CVE-2026-34289",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34289"
},
{
"cve": "CVE-2026-34290",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34290"
},
{
"cve": "CVE-2026-34291",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34291"
},
{
"cve": "CVE-2026-34292",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34292"
},
{
"cve": "CVE-2026-34294",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34294"
},
{
"cve": "CVE-2026-34305",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34305"
},
{
"cve": "CVE-2026-34315",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-34315"
},
{
"cve": "CVE-2026-35232",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-35232"
},
{
"cve": "CVE-2026-35243",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-35243"
},
{
"cve": "CVE-2026-35252",
"product_status": {
"known_affected": [
"T018993",
"T047913",
"T047914",
"T040467",
"751674",
"T050142",
"T053101",
"829576",
"T053102"
]
},
"release_date": "2026-04-21T22:00:00.000+00:00",
"title": "CVE-2026-35252"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…