Homepage

log4j-jboss-logmanager vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the log4j-jboss-logmanager package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Improper Input Validation

<0:1.1.4-1.Final_redhat_1.1.ep6.el7
  • H
Insufficient Verification of Data Authenticity

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Cross-site Scripting (XSS)

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Authentication Bypass by Primary Weakness

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Improperly Implemented Security Check for Standard

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Use of a Broken or Risky Cryptographic Algorithm

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Incorrect Permission Assignment for Critical Resource

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Information Exposure

<0:1.1.1-1.Final_redhat_1.1.ep6.el7
  • H
Deserialization of Untrusted Data

<0:1.1.4-3.Final_redhat_00002.1.ep6.el7
  • H
SQL Injection

<0:1.1.4-3.Final_redhat_00002.1.ep6.el7
  • H
Deserialization of Untrusted Data

<0:1.1.4-3.Final_redhat_00002.1.ep6.el7
  • H
Improper Input Validation

<0:1.1.4-3.Final_redhat_00002.1.ep6.el7
  • H
Incorrect Privilege Assignment

<0:1.1.4-1.Final_redhat_1.1.ep6.el7
  • H
Deserialization of Untrusted Data

<0:1.1.4-1.Final_redhat_1.1.ep6.el7