6Bk1602 0Aa12 0Tp0 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-45105 Maven MEDIUM PATCH This Month

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

Denial Of Service Apache Log4J Cloud Manager Debian Linux +113

NVD VulDB

CVSS 3.1

5.9

EPSS

70.4%

Threat

5.3

CVE-2021-44228 Maven CRITICAL POC KEV PATCH THREAT Act Now

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

Apache RCE 6Bk1602 0Aa12 0Tp0 Firmware 6Bk1602 0Aa22 0Tp0 Firmware 6Bk1602 0Aa32 0Tp0 Firmware +139

NVD GitHub Exploit-DB

CVSS 3.1

10.0

EPSS

94.4%

Threat

9.8

CVE-2021-45105 Maven

EPSS 70% 5.3 CVSS 5.9

MEDIUM PATCH This Month

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

Denial Of Service Apache Log4J +115

NVD VulDB

CVE-2021-44228 Maven

EPSS 94% 9.8 CVSS 10.0

CRITICAL POC KEV PATCH THREAT Act Now

Apache RCE 6Bk1602 0Aa12 0Tp0 Firmware +141

NVD GitHub Exploit-DB