CVE Watch—

CVE-2021-45046

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

CVSS

—

Sin CVSS

EPSS

100.0%

p100

KEV

SÍ

1 may 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 días100.0%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Apache / Log4j2

Vulnerabilidad

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Añadido a KEV

1 may 2023

Remediar antes de

22 may 2023

Uso conocido en ransomware

Sí

Descripción resumida

Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.

Acción requerida

Apply updates per vendor instructions.

Notas

https://logging.apache.org/log4j/2.x/security.html; https://nvd.nist.gov/vuln/detail/CVE-2021-45046

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-4422810.0 CRÍ

100.0%

KEV—80Apache Log4j2 Remote Code Execution Vulnerability64d