Utilities Advanced Spatial And Operational Analytics

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-5645 Maven CRITICAL POC PATCH THREAT Act Now

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 94.0%.

Deserialization Apache RCE Log4J Oncommand Api Services +77

NVD

CVSS 3.1

9.8

EPSS

94.0%

Threat

6.3

CVE-2017-5645 Maven

EPSS 94% 6.3 CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 94.0%.

Deserialization Apache RCE +79

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy