CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-44832

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.292

EPSS Ranking 96.4%

CVSS Severity

CVSS v3 Score 6.6

CVSS v2 Score 8.5

References

Products affected by CVE-2021-44832

Apache » Log4j » Version: 2.0

cpe:2.3:a:apache:log4j:2.0
Apache » Log4j » Version: 2.0.1

cpe:2.3:a:apache:log4j:2.0.1
Apache » Log4j » Version: 2.0.2

cpe:2.3:a:apache:log4j:2.0.2
Apache » Log4j » Version: 2.1

cpe:2.3:a:apache:log4j:2.1
Apache » Log4j » Version: 2.10.0

cpe:2.3:a:apache:log4j:2.10.0
Apache » Log4j » Version: 2.11.0

cpe:2.3:a:apache:log4j:2.11.0
Apache » Log4j » Version: 2.11.1

cpe:2.3:a:apache:log4j:2.11.1
Apache » Log4j » Version: 2.11.2

cpe:2.3:a:apache:log4j:2.11.2
Apache » Log4j » Version: 2.12.0

cpe:2.3:a:apache:log4j:2.12.0
Apache » Log4j » Version: 2.12.1

cpe:2.3:a:apache:log4j:2.12.1
Apache » Log4j » Version: 2.12.2

cpe:2.3:a:apache:log4j:2.12.2
Apache » Log4j » Version: 2.12.3

cpe:2.3:a:apache:log4j:2.12.3
Apache » Log4j » Version: 2.13.0

cpe:2.3:a:apache:log4j:2.13.0
Apache » Log4j » Version: 2.13.1

cpe:2.3:a:apache:log4j:2.13.1
Apache » Log4j » Version: 2.13.2

cpe:2.3:a:apache:log4j:2.13.2
Apache » Log4j » Version: 2.13.3

cpe:2.3:a:apache:log4j:2.13.3
Apache » Log4j » Version: 2.14.0

cpe:2.3:a:apache:log4j:2.14.0
Apache » Log4j » Version: 2.14.1

cpe:2.3:a:apache:log4j:2.14.1
Apache » Log4j » Version: 2.15.0

cpe:2.3:a:apache:log4j:2.15.0
Apache » Log4j » Version: 2.15.1

cpe:2.3:a:apache:log4j:2.15.1
Apache » Log4j » Version: 2.16.0

cpe:2.3:a:apache:log4j:2.16.0
Apache » Log4j » Version: 2.17.0

cpe:2.3:a:apache:log4j:2.17.0
Apache » Log4j » Version: 2.2

cpe:2.3:a:apache:log4j:2.2
Apache » Log4j » Version: 2.3

cpe:2.3:a:apache:log4j:2.3
Apache » Log4j » Version: 2.3.1

cpe:2.3:a:apache:log4j:2.3.1
Apache » Log4j » Version: 2.4

cpe:2.3:a:apache:log4j:2.4
Apache » Log4j » Version: 2.4.0

cpe:2.3:a:apache:log4j:2.4.0
Apache » Log4j » Version: 2.4.1

cpe:2.3:a:apache:log4j:2.4.1
Apache » Log4j » Version: 2.5

cpe:2.3:a:apache:log4j:2.5
Apache » Log4j » Version: 2.6

cpe:2.3:a:apache:log4j:2.6
Apache » Log4j » Version: 2.6.1

cpe:2.3:a:apache:log4j:2.6.1
Apache » Log4j » Version: 2.6.2

cpe:2.3:a:apache:log4j:2.6.2
Apache » Log4j » Version: 2.7

cpe:2.3:a:apache:log4j:2.7
Apache » Log4j » Version: 2.8

cpe:2.3:a:apache:log4j:2.8
Apache » Log4j » Version: 2.8.1

cpe:2.3:a:apache:log4j:2.8.1
Apache » Log4j » Version: 2.8.2

cpe:2.3:a:apache:log4j:2.8.2
Apache » Log4j » Version: 2.9.0

cpe:2.3:a:apache:log4j:2.9.0
Apache » Log4j » Version: 2.9.1

cpe:2.3:a:apache:log4j:2.9.1
Cisco » Cloudcenter » Version: 4.10.0.16

cpe:2.3:a:cisco:cloudcenter:4.10.0.16
Oracle » Communications Brm - Elastic Charging Engine » Version: 11.3

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3
Oracle » Communications Brm - Elastic Charging Engine » Version: 11.3.0.9.0

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3.0.9.0
Oracle » Communications Brm - Elastic Charging Engine » Version: 12

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12
Oracle » Communications Brm - Elastic Charging Engine » Version: 12.0

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0
Oracle » Communications Brm - Elastic Charging Engine » Version: 12.0.0.3

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3
Oracle » Communications Brm - Elastic Charging Engine » Version: 12.0.0.5.0

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.5.0
Oracle » Communications Diameter Signaling Router » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1
Oracle » Communications Diameter Signaling Router » Version: 8.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2
Oracle » Communications Diameter Signaling Router » Version: 8.2.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1
Oracle » Communications Diameter Signaling Router » Version: 8.2.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2
Oracle » Communications Diameter Signaling Router » Version: 8.3

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3
Oracle » Communications Diameter Signaling Router » Version: 8.3.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.5

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.5
Oracle » Communications Diameter Signaling Router » Version: 8.5.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0
Oracle » Communications Diameter Signaling Router » Version: 8.5.0.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0.2
Oracle » Communications Diameter Signaling Router » Version: 8.5.1.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.1.0
Oracle » Communications Interactive Session Recorder » Version: 6.3

cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3
Oracle » Communications Interactive Session Recorder » Version: 6.4

cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4
Oracle » Communications Offline Mediation Controller » Version: 12.0.0.3

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3
Oracle » Communications Offline Mediation Controller » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0
Oracle » Communications Offline Mediation Controller » Version: 12.0.0.5.0

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.5.0
Oracle » Flexcube Private Banking » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Oracle » Health Sciences Data Management Workbench » Version: 2.5.2.1

cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1
Oracle » Health Sciences Data Management Workbench » Version: 3.0.0.0

cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0
Oracle » Health Sciences Data Management Workbench » Version: 3.1.0.3

cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.1.0.3
Oracle » Policy Automation » Version: 12.2.0

cpe:2.3:a:oracle:policy_automation:12.2.0
Oracle » Policy Automation » Version: 12.2.1

cpe:2.3:a:oracle:policy_automation:12.2.1
Oracle » Policy Automation » Version: 12.2.10

cpe:2.3:a:oracle:policy_automation:12.2.10
Oracle » Policy Automation » Version: 12.2.11

cpe:2.3:a:oracle:policy_automation:12.2.11
Oracle » Policy Automation » Version: 12.2.12

cpe:2.3:a:oracle:policy_automation:12.2.12
Oracle » Policy Automation » Version: 12.2.13

cpe:2.3:a:oracle:policy_automation:12.2.13
Oracle » Policy Automation » Version: 12.2.14

cpe:2.3:a:oracle:policy_automation:12.2.14
Oracle » Policy Automation » Version: 12.2.15

cpe:2.3:a:oracle:policy_automation:12.2.15
Oracle » Policy Automation » Version: 12.2.2

cpe:2.3:a:oracle:policy_automation:12.2.2
Oracle » Policy Automation » Version: 12.2.20

cpe:2.3:a:oracle:policy_automation:12.2.20
Oracle » Policy Automation » Version: 12.2.3

cpe:2.3:a:oracle:policy_automation:12.2.3
Oracle » Policy Automation » Version: 12.2.4

cpe:2.3:a:oracle:policy_automation:12.2.4
Oracle » Policy Automation » Version: 12.2.5

cpe:2.3:a:oracle:policy_automation:12.2.5
Oracle » Policy Automation » Version: 12.2.6

cpe:2.3:a:oracle:policy_automation:12.2.6
Oracle » Policy Automation » Version: 12.2.7

cpe:2.3:a:oracle:policy_automation:12.2.7
Oracle » Policy Automation » Version: 12.2.8

cpe:2.3:a:oracle:policy_automation:12.2.8
Oracle » Policy Automation » Version: 12.2.9

cpe:2.3:a:oracle:policy_automation:12.2.9
Oracle » Policy Automation For Mobile Devices » Version: 12.2.0

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.0
Oracle » Policy Automation For Mobile Devices » Version: 12.2.1

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.1
Oracle » Policy Automation For Mobile Devices » Version: 12.2.10

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.10
Oracle » Policy Automation For Mobile Devices » Version: 12.2.2

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.2
Oracle » Policy Automation For Mobile Devices » Version: 12.2.20

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.20
Oracle » Policy Automation For Mobile Devices » Version: 12.2.3

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.3
Oracle » Policy Automation For Mobile Devices » Version: 12.2.4

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.4
Oracle » Policy Automation For Mobile Devices » Version: 12.2.5

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.5
Oracle » Policy Automation For Mobile Devices » Version: 12.2.6

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.6
Oracle » Policy Automation For Mobile Devices » Version: 12.2.7

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.7
Oracle » Policy Automation For Mobile Devices » Version: 12.2.8

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.8
Oracle » Policy Automation For Mobile Devices » Version: 12.2.9

cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.9
Oracle » Primavera Gateway » Version: 17.12.0

cpe:2.3:a:oracle:primavera_gateway:17.12.0
Oracle » Primavera Gateway » Version: 17.12.10

cpe:2.3:a:oracle:primavera_gateway:17.12.10
Oracle » Primavera Gateway » Version: 17.12.11

cpe:2.3:a:oracle:primavera_gateway:17.12.11
Oracle » Primavera Gateway » Version: 17.12.6

cpe:2.3:a:oracle:primavera_gateway:17.12.6
Oracle » Primavera Gateway » Version: 17.12.7

cpe:2.3:a:oracle:primavera_gateway:17.12.7
Oracle » Primavera Gateway » Version: 17.12.8

cpe:2.3:a:oracle:primavera_gateway:17.12.8
Oracle » Primavera Gateway » Version: 17.12.9

cpe:2.3:a:oracle:primavera_gateway:17.12.9
Oracle » Primavera Gateway » Version: 18.8.0

cpe:2.3:a:oracle:primavera_gateway:18.8.0
Oracle » Primavera Gateway » Version: 18.8.11

cpe:2.3:a:oracle:primavera_gateway:18.8.11
Oracle » Primavera Gateway » Version: 18.8.12

cpe:2.3:a:oracle:primavera_gateway:18.8.12
Oracle » Primavera Gateway » Version: 18.8.13

cpe:2.3:a:oracle:primavera_gateway:18.8.13
Oracle » Primavera Gateway » Version: 18.8.8

cpe:2.3:a:oracle:primavera_gateway:18.8.8
Oracle » Primavera Gateway » Version: 18.8.8.1

cpe:2.3:a:oracle:primavera_gateway:18.8.8.1
Oracle » Primavera Gateway » Version: 18.8.9

cpe:2.3:a:oracle:primavera_gateway:18.8.9
Oracle » Primavera Gateway » Version: 19.12.0

cpe:2.3:a:oracle:primavera_gateway:19.12.0
Oracle » Primavera Gateway » Version: 19.12.10

cpe:2.3:a:oracle:primavera_gateway:19.12.10
Oracle » Primavera Gateway » Version: 19.12.11

cpe:2.3:a:oracle:primavera_gateway:19.12.11
Oracle » Primavera Gateway » Version: 19.12.12

cpe:2.3:a:oracle:primavera_gateway:19.12.12
Oracle » Primavera Gateway » Version: 19.12.4

cpe:2.3:a:oracle:primavera_gateway:19.12.4
Oracle » Primavera Gateway » Version: 20.12.0

cpe:2.3:a:oracle:primavera_gateway:20.12.0
Oracle » Primavera Gateway » Version: 20.12.7

cpe:2.3:a:oracle:primavera_gateway:20.12.7
Oracle » Primavera Gateway » Version: 21.12.0

cpe:2.3:a:oracle:primavera_gateway:21.12.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.1.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.1.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.10

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.10
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.14

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.14
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.18.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.18.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.2.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.2.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.3.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.3.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.4.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.4.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.5.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.5.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 19.12.6.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:19.12.6.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 20.12.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:20.12.0.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 20.12.12.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:20.12.12.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 20.12.3

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:20.12.3
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 21.12.0.0

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:21.12.0.0
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Primavera Unifier » Version: 21.12

cpe:2.3:a:oracle:primavera_unifier:21.12
Oracle » Product Lifecycle Analytics » Version: 3.6.1

cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1
Oracle » Retail Assortment Planning » Version: 16.0.3

cpe:2.3:a:oracle:retail_assortment_planning:16.0.3
Oracle » Retail Fiscal Management » Version: 14.2

cpe:2.3:a:oracle:retail_fiscal_management:14.2
Oracle » Retail Order Broker » Version: 18.0

cpe:2.3:a:oracle:retail_order_broker:18.0
Oracle » Retail Order Broker » Version: 19.1

cpe:2.3:a:oracle:retail_order_broker:19.1
Oracle » Retail Xstore Point Of Service » Version: 17.0.4

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4
Oracle » Retail Xstore Point Of Service » Version: 18.0.3

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle » Retail Xstore Point Of Service » Version: 19.0.2

cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2
Oracle » Retail Xstore Point Of Service » Version: 20.0.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1
Oracle » Retail Xstore Point Of Service » Version: 21.0.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:21.0.1
Oracle » Siebel Ui Framework » Version: N/A

cpe:2.3:a:oracle:siebel_ui_framework:-
Oracle » Siebel Ui Framework » Version: 16.0

cpe:2.3:a:oracle:siebel_ui_framework:16.0
Oracle » Siebel Ui Framework » Version: 16.1

cpe:2.3:a:oracle:siebel_ui_framework:16.1
Oracle » Siebel Ui Framework » Version: 17.0

cpe:2.3:a:oracle:siebel_ui_framework:17.0
Oracle » Siebel Ui Framework » Version: 18.0

cpe:2.3:a:oracle:siebel_ui_framework:18.0
Oracle » Siebel Ui Framework » Version: 18.10

cpe:2.3:a:oracle:siebel_ui_framework:18.10
Oracle » Siebel Ui Framework » Version: 18.11

cpe:2.3:a:oracle:siebel_ui_framework:18.11
Oracle » Siebel Ui Framework » Version: 18.7

cpe:2.3:a:oracle:siebel_ui_framework:18.7
Oracle » Siebel Ui Framework » Version: 18.8

cpe:2.3:a:oracle:siebel_ui_framework:18.8
Oracle » Siebel Ui Framework » Version: 18.9

cpe:2.3:a:oracle:siebel_ui_framework:18.9
Oracle » Siebel Ui Framework » Version: 19.0

cpe:2.3:a:oracle:siebel_ui_framework:19.0
Oracle » Siebel Ui Framework » Version: 19.10

cpe:2.3:a:oracle:siebel_ui_framework:19.10
Oracle » Siebel Ui Framework » Version: 19.7

cpe:2.3:a:oracle:siebel_ui_framework:19.7
Oracle » Siebel Ui Framework » Version: 19.8

cpe:2.3:a:oracle:siebel_ui_framework:19.8
Oracle » Siebel Ui Framework » Version: 20.1

cpe:2.3:a:oracle:siebel_ui_framework:20.1
Oracle » Siebel Ui Framework » Version: 20.12

cpe:2.3:a:oracle:siebel_ui_framework:20.12
Oracle » Siebel Ui Framework » Version: 20.2

cpe:2.3:a:oracle:siebel_ui_framework:20.2
Oracle » Siebel Ui Framework » Version: 20.5

cpe:2.3:a:oracle:siebel_ui_framework:20.5
Oracle » Siebel Ui Framework » Version: 20.6

cpe:2.3:a:oracle:siebel_ui_framework:20.6
Oracle » Siebel Ui Framework » Version: 20.8

cpe:2.3:a:oracle:siebel_ui_framework:20.8
Oracle » Siebel Ui Framework » Version: 21.0

cpe:2.3:a:oracle:siebel_ui_framework:21.0
Oracle » Siebel Ui Framework » Version: 21.12

cpe:2.3:a:oracle:siebel_ui_framework:21.12
Oracle » Siebel Ui Framework » Version: 21.2

cpe:2.3:a:oracle:siebel_ui_framework:21.2
Oracle » Siebel Ui Framework » Version: 21.9

cpe:2.3:a:oracle:siebel_ui_framework:21.9
Oracle » Siebel Ui Framework » Version: 8.1.1

cpe:2.3:a:oracle:siebel_ui_framework:8.1.1
Oracle » Siebel Ui Framework » Version: 8.2.2

cpe:2.3:a:oracle:siebel_ui_framework:8.2.2
Oracle » Weblogic Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0
Oracle » Weblogic Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0
Oracle » Weblogic Server » Version: 14.1.1.0.0

cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-44832

Products

Pricing

Contact Us