6Bk1602 0Aa32 0Tp0 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-44228 Dec 10, 10:15 Maven CRITICAL POC KEV PATCH THREAT Act Now

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

RCE Apache Apple Cisco Debian +149

NVD GitHub Exploit-DB

CVSS 3.1

10.0

EPSS

94.4%

Threat

9.8

CVE-2021-45105 Dec 18, 12:15 Maven MEDIUM PATCH This Month

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

Denial Of Service Apache Debian Oracle Business Intelligence +117

NVD VulDB

CVSS 3.1

5.9

EPSS

70.4%

Threat

5.3

CVE-2021-44228 Maven

EPSS 94% 9.8 CVSS 10.0

CRITICAL POC KEV PATCH THREAT Act Now

RCE Apache Apple +151

NVD GitHub Exploit-DB

CVE-2021-45105 Maven

EPSS 70% 5.3 CVSS 5.9

MEDIUM PATCH This Month

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

Denial Of Service Apache Debian +119

NVD VulDB