Homepage
About Snyk

log4j:log4j vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the log4j:log4j package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

[1.0.4,)
  • H
Deserialization of Untrusted Data

[0,)
  • H
SQL Injection

[0,)
  • H
Deserialization of Untrusted Data

[0,)
  • M
Arbitrary Code Execution

[0,)
  • C
Deserialization of Untrusted Data

[0,)
  • L
Man-in-the-Middle (MitM)

[0,)

Package versions

1 - 14 of 14 Results
version published direct vulnerabilities
1.2.17 26 May, 2012
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.16 31 Mar, 2010
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.15 30 Aug, 2007
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.14 1 Dec, 2006
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.13 3 Jan, 2006
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.12 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.11 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.9 3 Jun, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.8 5 Mar, 2004
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.7 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.6 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.5 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.2.4 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L
1.1.3 22 Nov, 2005
  • 1
    C
  • 3
    H
  • 2
    M
  • 1
    L