CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
Deserialization
Apache
Chainsaw
Log4J
Reload4J
+23
NVD
VulDB
CVSS 3.1
8.8
EPSS
2.7%
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
RCE
Deserialization
Apache
Log4J
Snapmanager
+24
NVD
VulDB
CVSS 3.1
8.8
EPSS
0.8%