CVE Watch—

CVE-2021-45046

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

1 de mai. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Apache / Log4j2

Vulnerabilidade

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

1 de mai. de 2023

Corrigir até

22 de mai. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.

Ação necessária

Apply updates per vendor instructions.

Notas

https://logging.apache.org/log4j/2.x/security.html; https://nvd.nist.gov/vuln/detail/CVE-2021-45046

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-4422810.0 CRÍ

100.0%

KEV—80Apache Log4j2 Remote Code Execution Vulnerability86d