Homepage

apache-log4j1.2 vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the apache-log4j1.2 package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
SQL Injection

<1.2.17-8+deb10u1ubuntu0.2
  • M
Deserialization of Untrusted Data

<1.2.17-8+deb10u1ubuntu0.2
  • L
Deserialization of Untrusted Data

<1.2.17-8+deb10u1ubuntu0.2
  • M
Deserialization of Untrusted Data

<1.2.17-8+deb10u1ubuntu0.1
  • M
Deserialization of Untrusted Data

<1.2.17-8+deb10u1build0.18.04.1