Skip to main content

Utilities Advanced Spatial And Operational Analytics

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2017-5645 Apr 17, 21:59 Maven CRITICAL POC PATCH THREAT Act Now

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 94.0%.

RCE Apache Deserialization Oracle Red Hat +80
NVD
CVSS 3.1
9.8
EPSS
94.0%
Threat
6.3
CVE-2017-5645 Maven
EPSS 94% 6.3 CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 94.0%.

RCE Apache Deserialization +82
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy