Critical severity9.8NVD Advisory· Published Jan 18, 2022· Updated May 27, 2026

CVE-2022-23305

Description

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
log4j:log4jMaven	<= 1.2.17	—
org.zenframework.z8.dependencies.commons:log4j-1.2.17Maven	<= 2.0	—

Affected products

221

Apache/Log4j
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
Range: >=1.2,<=1.2.17
Broadcom Corporation/Brocade Sannav
cpe:2.3:a:broadcom:brocade_sannav:-:*:*:*:*:*:*:*
NetApp/Snapmanager2 versions
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*+ 1 more
- cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
- cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
Oracle Corporation/Advanced Supply Chain Planning2 versions
cpe:2.3:a:oracle:advanced_supply_chain_planning:12.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:advanced_supply_chain_planning:12.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2:*:*:*:*:*:*:*
Oracle Corporation/Business Intelligence3 versions
cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*+ 2 more
- cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*
Oracle Corporation/Business Process Management Suite2 versions
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*
Oracle Corporation/Communications Eagle FTP Table Base Retrieval
cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:*
Oracle Corporation/Communications Instant Messaging Server
cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*
Oracle Corporation/Communications Messaging Server
cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*
Oracle Corporation/Communications Network Integrity
cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*
Oracle Corporation/Communications Offline Mediation Controller2 versions
cpe:2.3:a:oracle:communications_offline_mediation_controller:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:communications_offline_mediation_controller:*:*:*:*:*:*:*:*range: <12.0.0.4.4
- cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.5.0:*:*:*:*:*:*:*
Oracle Corporation/Communications Unified Inventory Management2 versions
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:*
Oracle Corporation/E Business Suite Cloud Manager And Cloud Backup Module2 versions
cpe:2.3:a:oracle:e-business_suite_cloud_manager_and_cloud_backup_module:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:e-business_suite_cloud_manager_and_cloud_backup_module:*:*:*:*:*:*:*:*range: <2.2.1.1.1
- cpe:2.3:a:oracle:e-business_suite_cloud_manager_and_cloud_backup_module:2.2.1.1.1:*:*:*:*:*:*:*
Oracle Corporation/E Business Suite Information Discovery
cpe:2.3:a:oracle:e-business_suite_information_discovery:*:*:*:*:*:*:*:*
Range: >=12.2.3,<=12.2.11
Oracle Corporation/Enterprise Manager Base Platform2 versions
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*
Oracle Corporation/Financial Services Revenue Management And Billing Analytics3 versions
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7.0.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8.0.0:*:*:*:*:*:*:*
Oracle Corporation/Healthcare Foundation
cpe:2.3:a:oracle:healthcare_foundation:8.1.0:*:*:*:*:*:*:*
Oracle Corporation/Hyperion Data Relationship Management
cpe:2.3:a:oracle:hyperion_data_relationship_management:*:*:*:*:*:*:*:*
Range: <11.2.8.0
Oracle Corporation/Hyperion Infrastructure Technology
cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:*
Range: <11.2.8.0
Oracle Corporation/Identity Management Suite2 versions
cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:identity_management_suite:12.2.1.4.0:*:*:*:*:*:*:*
Oracle Corporation/Identity Manager Connector
cpe:2.3:a:oracle:identity_manager_connector:11.1.1.5.0:*:*:*:*:*:*:*
Oracle Corporation/Jdeveloper
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*
Oracle Corporation/Middleware Common Libraries And Tools
cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:*:*:*:*:*:*:*
Oracle Corporation/Mysql Enterprise Monitor
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*
Range: <=8.0.29
Oracle Corporation/Retail Extract Transform And Load
cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.5:*:*:*:*:*:*:*
Oracle Corporation/Tuxedo
cpe:2.3:a:oracle:tuxedo:12.2.2.0.0:*:*:*:*:*:*:*
Oracle Corporation/Weblogic Server3 versions
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
Qos Ch/Reload4j
cpe:2.3:a:qos:reload4j:*:*:*:*:*:*:*:*
Range: <1.2.18.2
osv-coords178 versions
pkg:apk/chainguard/druid-compat pkg:apk/wolfi/druid-compat pkg:maven/log4j/log4j pkg:maven/org.zenframework.z8.dependencies.commons/log4j-1.2.17 pkg:rpm/almalinux/parfait pkg:rpm/almalinux/parfait-examples pkg:rpm/almalinux/parfait-javadoc pkg:rpm/almalinux/pcp-parfait-agent pkg:rpm/almalinux/si-units pkg:rpm/almalinux/si-units-javadoc pkg:rpm/almalinux/unit-api pkg:rpm/almalinux/unit-api-javadoc pkg:rpm/almalinux/uom-lib pkg:rpm/almalinux/uom-lib-javadoc pkg:rpm/almalinux/uom-parent pkg:rpm/almalinux/uom-se pkg:rpm/almalinux/uom-se-javadoc pkg:rpm/almalinux/uom-systems pkg:rpm/almalinux/uom-systems-javadoc pkg:rpm/opensuse/kafka&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kafka-kit&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/log4j12&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/log4j&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/elasticsearch&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/elasticsearch&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/elasticsearch&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/elasticsearch&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/elasticsearch&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kafka&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kafka&distro=SUSE%20Package%20Hub%2015%20SP3 pkg:rpm/suse/kafka-kit&distro=SUSE%20Package%20Hub%2015%20SP3 pkg:rpm/suse/log4j12&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2 pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/log4j12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/log4j12&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/log4j12&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/log4j12&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/log4j&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/log4j&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/log4j&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/log4j&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/log4j&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/log4j&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/log4j&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/logstash&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/openstack-monasca-agent&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/openstack-monasca-agent&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/openstack-monasca-agent&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/openstack-monasca-agent&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/openstack-monasca-agent&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/openstack-monasca-log-metrics&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/openstack-monasca-log-metrics&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/openstack-monasca-log-metrics&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/openstack-monasca-log-persister&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/openstack-monasca-log-persister&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/openstack-monasca-log-persister&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/openstack-monasca-log-transformer&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/openstack-monasca-log-transformer&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/openstack-monasca-log-transformer&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/openstack-monasca-persister-java&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/openstack-monasca-persister-java&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/openstack-monasca-persister-java&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/openstack-monasca-persister-java&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/openstack-monasca-persister-java&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/openstack-monasca-thresh&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/openstack-monasca-thresh&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/openstack-monasca-thresh&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/openstack-monasca-thresh&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/openstack-monasca-thresh&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/spark&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/spark&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/spark&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/spark&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/spark&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/storm&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/storm&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/storm&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/storm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/storm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/venv-openstack-aodh&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-aodh&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-barbican&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-barbican&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-barbican&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-ceilometer&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-ceilometer&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-cinder&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-cinder&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-cinder&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-designate&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-designate&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-designate&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-freezer&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-freezer&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-glance&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-glance&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-glance&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-heat&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-heat&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-heat&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-horizon&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-horizon&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-horizon-hpe&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-ironic&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-ironic&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-ironic&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-keystone&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-keystone&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-keystone&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-magnum&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-magnum&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-magnum&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-manila&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-manila&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-manila&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-monasca-ceilometer&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-monasca-ceilometer&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-monasca-ceilometer&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-monasca&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-monasca&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-monasca&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-murano&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-murano&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-neutron&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-neutron&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-neutron&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-nova&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-nova&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-nova&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-octavia&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-octavia&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-octavia&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-sahara&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-sahara&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-sahara&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-swift&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-swift&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/venv-openstack-swift&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/venv-openstack-trove&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/venv-openstack-trove&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/zookeeper&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/zookeeper&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/zookeeper&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/zookeeper&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/zookeeper&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 34.0.0-r6+ 177 more
- (no CPE)range: < 34.0.0-r6
- (no CPE)range: < 34.0.0-r6
- (no CPE)range: <= 1.2.17
- (no CPE)range: <= 2.0
- (no CPE)range: < 0.5.4-4.module_el8.5.0+235+62ea7738
- (no CPE)range: < 0.5.4-4.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 0.5.4-4.module_el8.5.0+235+62ea7738
- (no CPE)range: < 0.5.4-4.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 0.6.5-2.module_el8.5.0+235+62ea7738
- (no CPE)range: < 0.6.5-2.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 1.0-5.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 1.0-5.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 1.0.1-6.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 1.0.1-6.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 1.0.3-3.module_el8.5.0+235+62ea7738
- (no CPE)range: < 1.0.4-3.module_el8.5.0+235+62ea7738
- (no CPE)range: < 1.0.4-3.module_el8.5.0+235+62ea7738
- (no CPE)range: < 0.7-1.module_el8.5.0+235+62ea7738
- (no CPE)range: < 0.7-1.module_el8.5.0+2610+de2b8c0b
- (no CPE)range: < 2.1.0-bp153.2.6.1
- (no CPE)range: < 2.1.0-bp153.2.6.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 2.4.2-5.6.1
- (no CPE)range: < 2.4.2-5.6.1
- (no CPE)range: < 2.4.2-6.6.1
- (no CPE)range: < 2.4.2-5.6.1
- (no CPE)range: < 2.4.2-6.6.1
- (no CPE)range: < 0.10.2.2-5.12.1
- (no CPE)range: < 0.10.2.2-5.12.1
- (no CPE)range: < 0.10.2.2-3.5.1
- (no CPE)range: < 0.10.2.2-5.12.1
- (no CPE)range: < 0.10.2.2-3.5.1
- (no CPE)range: < 2.1.0-bp153.2.6.1
- (no CPE)range: < 2.1.0-bp153.2.6.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.17-4.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.15-26.32.20.1
- (no CPE)range: < 1.2.15-26.32.20.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.17-5.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 1.2.15-126.9.1
- (no CPE)range: < 2.4.1-5.10.1
- (no CPE)range: < 2.4.1-5.10.1
- (no CPE)range: < 2.4.1-7.6.1
- (no CPE)range: < 2.4.1-5.10.1
- (no CPE)range: < 2.4.1-7.6.1
- (no CPE)range: < 2.2.6~dev4-3.27.1
- (no CPE)range: < 2.2.6~dev4-3.27.1
- (no CPE)range: < 2.8.2~dev5-3.18.1
- (no CPE)range: < 2.2.6~dev4-3.27.1
- (no CPE)range: < 2.8.2~dev5-3.18.1
- (no CPE)range: < 0.0.1-3.3.1
- (no CPE)range: < 0.0.1-3.3.1
- (no CPE)range: < 0.0.1-3.3.1
- (no CPE)range: < 0.0.1-5.3.1
- (no CPE)range: < 0.0.1-5.3.1
- (no CPE)range: < 0.0.1-5.3.1
- (no CPE)range: < 0.0.1-4.3.1
- (no CPE)range: < 0.0.1-4.3.1
- (no CPE)range: < 0.0.1-4.3.1
- (no CPE)range: < 1.7.1~a0~dev2-3.9.1
- (no CPE)range: < 1.7.1~a0~dev2-3.9.1
- (no CPE)range: < 1.12.1~dev9-15.1
- (no CPE)range: < 1.7.1~a0~dev2-3.9.1
- (no CPE)range: < 1.12.1~dev9-15.1
- (no CPE)range: < 2.1.1-4.6.1
- (no CPE)range: < 2.1.1-4.6.1
- (no CPE)range: < 2.1.1-5.6.1
- (no CPE)range: < 2.1.1-4.6.1
- (no CPE)range: < 2.1.1-5.6.1
- (no CPE)range: < 1.6.3-8.12.1
- (no CPE)range: < 1.6.3-8.12.1
- (no CPE)range: < 2.2.3-5.9.2
- (no CPE)range: < 1.6.3-8.12.1
- (no CPE)range: < 2.2.3-5.9.2
- (no CPE)range: < 1.2.3-3.11.2
- (no CPE)range: < 1.2.3-3.11.2
- (no CPE)range: < 1.2.3-3.8.1
- (no CPE)range: < 1.2.3-3.11.2
- (no CPE)range: < 1.2.3-3.8.1
- (no CPE)range: < 5.1.1~dev7-12.40.1
- (no CPE)range: < 5.1.1~dev7-12.40.1
- (no CPE)range: < 5.0.2~dev3-12.41.1
- (no CPE)range: < 5.0.2~dev3-12.41.1
- (no CPE)range: < 7.0.1~dev24-3.33.1
- (no CPE)range: < 9.0.8~dev7-12.38.1
- (no CPE)range: < 9.0.8~dev7-12.38.1
- (no CPE)range: < 11.2.3~dev29-14.42.1
- (no CPE)range: < 11.2.3~dev29-14.42.1
- (no CPE)range: < 13.0.10~dev23-3.36.1
- (no CPE)range: < 5.0.3~dev7-12.39.1
- (no CPE)range: < 5.0.3~dev7-12.39.1
- (no CPE)range: < 7.0.2~dev2-3.33.1
- (no CPE)range: < 5.0.0.0~xrc2~dev2-10.36.1
- (no CPE)range: < 5.0.0.0~xrc2~dev2-10.36.1
- (no CPE)range: < 15.0.3~dev3-12.39.1
- (no CPE)range: < 15.0.3~dev3-12.39.1
- (no CPE)range: < 17.0.1~dev30-3.31.1
- (no CPE)range: < 9.0.8~dev22-12.43.1
- (no CPE)range: < 9.0.8~dev22-12.43.1
- (no CPE)range: < 11.0.4~dev4-3.33.1
- (no CPE)range: < 12.0.5~dev6-14.46.1
- (no CPE)range: < 14.1.1~dev11-4.37.1
- (no CPE)range: < 12.0.5~dev6-14.46.1
- (no CPE)range: < 9.1.8~dev8-12.41.1
- (no CPE)range: < 9.1.8~dev8-12.41.1
- (no CPE)range: < 11.1.5~dev17-4.31.1
- (no CPE)range: < 12.0.4~dev11-11.43.1
- (no CPE)range: < 12.0.4~dev11-11.43.1
- (no CPE)range: < 14.2.1~dev7-3.34.1
- (no CPE)range: < 5.0.2_5.0.2_5.0.2~dev31-11.40.1
- (no CPE)range: < 5.0.2_5.0.2_5.0.2~dev31-11.40.1
- (no CPE)range: < 7.2.1~dev1-4.33.1
- (no CPE)range: < 5.1.1~dev5-12.45.1
- (no CPE)range: < 5.1.1~dev5-12.45.1
- (no CPE)range: < 7.4.2~dev60-3.39.1
- (no CPE)range: < 1.5.1_1.5.1_1.5.1~dev3-8.36.1
- (no CPE)range: < 1.5.1_1.5.1_1.5.1~dev3-8.36.1
- (no CPE)range: < 1.8.2~dev3-3.33.1
- (no CPE)range: < 2.2.2~dev1-11.43.1
- (no CPE)range: < 2.2.2~dev1-11.43.1
- (no CPE)range: < 2.7.1~dev10-3.35.2
- (no CPE)range: < 4.0.2~dev2-12.36.1
- (no CPE)range: < 4.0.2~dev2-12.36.1
- (no CPE)range: < 11.0.9~dev69-13.46.1
- (no CPE)range: < 11.0.9~dev69-13.46.1
- (no CPE)range: < 13.0.8~dev164-6.37.1
- (no CPE)range: < 16.1.9~dev92-11.44.1
- (no CPE)range: < 16.1.9~dev92-11.44.1
- (no CPE)range: < 18.3.1~dev91-3.37.1
- (no CPE)range: < 1.0.6~dev3-12.41.1
- (no CPE)range: < 1.0.6~dev3-12.41.1
- (no CPE)range: < 3.2.3~dev7-4.33.1
- (no CPE)range: < 7.0.5~dev4-11.40.1
- (no CPE)range: < 7.0.5~dev4-11.40.1
- (no CPE)range: < 9.0.2~dev15-3.33.1
- (no CPE)range: < 2.15.2_2.15.2_2.15.2~dev32-11.31.1
- (no CPE)range: < 2.15.2_2.15.2_2.15.2~dev32-11.31.1
- (no CPE)range: < 2.19.2~dev48-2.28.1
- (no CPE)range: < 8.0.2~dev2-11.40.1
- (no CPE)range: < 8.0.2~dev2-11.40.1
- (no CPE)range: < 3.4.10-3.15.1
- (no CPE)range: < 3.4.10-3.15.1
- (no CPE)range: < 3.4.13-3.12.1
- (no CPE)range: < 3.4.10-3.15.1
- (no CPE)range: < 3.4.13-3.12.1
Apache/Log4j 1.xcpe-rescue
Range: 1.2.1

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/cpuapr2022.htmlnvdPatchThird Party AdvisoryWEB
www.oracle.com/security-alerts/cpujul2022.htmlnvdPatchThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2022/01/18/4nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-65fg-84f6-3jq3ghsaADVISORY
lists.apache.org/thread/pt6lh3pbsvxqlwlp4c5l798dv2hkc85ynvdIssue TrackingMailing ListVendor AdvisoryWEB
logging.apache.org/log4j/1.2/index.htmlnvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-23305ghsaADVISORY
security.netapp.com/advisory/ntap-20220217-0007/nvdThird Party Advisory
security.netapp.com/advisory/ntap-20220217-0007ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.053
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000