Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
Connections 79
has cited scope1 retained · stored CVE-2021-44228 → Apache Software Foundation · Apache Log4j2a10a1c36-8b28-4f1b-a01a-9c4cfc33e3e4
has environmental constraint1 retained · stored CVE-2021-44228 → siemens · 6bk1602-0aa12-0tp0912ba211-714f-4b40-9260-0f14ee0df9b0
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_4125cf38290b-9cd8-4afd-b178-72c724d3c7fe
has environmental constraint1 retained · stored CVE-2021-44228 → siemens · 6bk1602-0aa42-0tp0957c26ff-ed87-4ef1-800d-1d0396c85da2
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_9300c87027b5-a6d0-4127-8d90-f8dc0872b409
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_4112488147d5-09db-4158-9ba0-b32a7b7a02e5
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_112027e6b093-4ada-45e7-ad33-dc14b4c3be68
has environmental constraint1 retained · stored CVE-2021-44228 → siemens · 6bk1602-0aa22-0tp0ea77c682-0aff-4c42-b044-4bbc0b36e535
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_2130c3fffa23-5bce-469f-a0c5-6c4903827afa
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_115008ef3d8e-4925-4d22-99df-e791034fe312
has environmental constraint1 retained · stored CVE-2021-44228 → cisco · firepower_4150b5b2c34e-4e79-4920-87ab-40003dd80701
has vulnerable target scope2 retained · stored CVE-2021-44228 → siemens · sentron_powermanager4766401e-a5e2-40cb-97c0-09ad7dd37fd3931ed2ae-dd2e-4edf-a311-8af99a8582dc
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · optical_network_controller2736ba8a-715f-4b6b-b212-2aed298d00523ad5d12c-1d8f-4970-954d-11cf416132be
has vulnerable target scope8 retained · stored CVE-2021-44228 → cisco · firepower_threat_defense2c25c1bd-62d0-4c47-9116-67b65aec07be56723cf4-f0b6-445e-8a48-e61b0e69c646679a68aa-bdb8-4f1c-a11a-68b49f5c8f8c70364164-1f0f-42f8-9b2c-08bc137ad4637ca75a06-e5be-437b-8e21-b15c4fa75031914716d4-e287-4014-ba28-97a9ea973fa1
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · industrial_edge_management1c5a63fb-782b-4fd0-b916-2a764efc3820
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · crosswork_zero_touch_provisioning6535be56-7ddd-4edc-a09a-fedc99a7777ba81844ca-118b-4a10-9bed-702001420fe4
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · comos16430d04-505e-4961-a8c7-824fafb47bc7
has vulnerable target scope1 retained · stored CVE-2021-44228 → netapp · cloud_managerb4c1718e-854a-41be-98f9-526a589a75fd
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · mobility_services_engine0df8d789-e79b-485a-ae0c-cef97b78ac20
has vulnerable target scope17 retained · stored CVE-2021-44228 → cisco · webex_meetings_server14289abe-b060-433b-b738-19bd4017c197286afd0d-4584-4a3e-b791-b755203a04604a9ecac5-b8f6-4389-939d-243298ec05684c84f862-b00f-4a38-aedd-ffd1337818c463caf1b3-18c2-47d7-90b3-3a85f4e8884a64ea9cfd-d713-496f-a72f-ef48597a5756
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · workload_optimization_manager90a48a0b-7cb9-41ca-8146-e23f336be7c8
has vulnerable target scope8 retained · stored CVE-2021-44228 → cisco · fxos049f90a1-8163-41a7-9cbf-3b90423d35170a853cc1-2509-4325-9fb6-fa73f40bdd7c0d4b27b2-9934-4037-87cb-b88c0700c60f59e6aa93-dcb3-455a-a4e9-6d06f9cd55d580dbf165-7faf-46b2-b525-5db5d5a5c5bd9584400b-6247-4e59-bc5c-c7ca7fcf7bb6
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · nexus_insightsc4edac14-af89-4462-b0a4-58c42396205a
has vulnerable target scope4 retained · stored CVE-2021-44228 → cisco · enterprise_chat_and_email0ed0f59b-08ec-45c2-8711-ddf50f660d414c50b0f2-8ab2-4d61-b331-33f7c323a60498ac9faf-10bc-4e06-8f80-784110d6af13f572d6fb-83c7-408b-b29a-28fd1bcfe5f4
has vulnerable target scope4 retained · stored CVE-2021-44228 → siemens · spectrum_power_4744c2e7f-89be-4d2a-bf76-ed0f4a38c7bb8a5e5e3f-15e9-4e3c-ab2d-d25cfa0053b48ce90590-665e-44d2-9bb8-6eed6c3760049517b681-3647-475a-ba81-64f2d9d8b280
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · cyber_vision458cf655-ca17-4df9-8092-27a1e5ea8c47
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · video_surveillance_operations_manager3655fb56-df53-4829-81b0-81e8aae97989
has vulnerable target scope5 retained · stored CVE-2021-44228 → cisco · cloudcenter_suite07741d5a-3d2e-4406-82d6-52aed748afb042f618fa-58b3-4b59-9e4a-8f944d1f6a986bdc8465-e14a-4905-9f50-ff196a1d77c18b4c557c-553d-4f96-9ddf-ff5c7c3f317aef5656a3-2951-4e99-8e8c-a5f49cf7036c
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · iot_operations_dashboard1ff07949-4ddf-42b9-ac6d-514ff0f7b6d0
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · dna_spaces:_connector1b0bc226-1fc9-4967-894f-982063b6f71f
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · teamcenter8efaa820-46a0-4327-9674-5c0460bc9819
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · ucs_director3b0b54fd-a3e7-4c47-aed3-9e9182f88f29
has vulnerable target scope1 retained · stored CVE-2021-44228 → intel · system_studio581ee6ee-3f8a-42d9-bddc-b5319521c377
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · virtual_topology_system692f9b57-b1e6-4bdf-acb3-629a9d5b939cd55da430-d079-47db-8ac6-9e2d0c154d62
has vulnerable target scope4 retained · stored CVE-2021-44228 → siemens · spectrum_power_7c3b52829-d73c-46f5-bf53-dfe6a9578071d61ad19e-f532-4770-b64a-17c8c0a2ed02dce0b13e-99f6-434c-a291-4cdddcf5dbf6df3bab4f-bc9d-4605-90af-db20de4a8a3c
has vulnerable target scope6 retained · stored CVE-2021-44228 → siemens · desigo_cc_advanced_reports1160bb01-22c7-4b45-994b-52a38e2dfa453eabf005-abec-4314-9bd5-1c7880e12d4347f94455-17e4-4b2b-95a5-bde9938dee009425f68d-154a-423d-aa97-d9c64425dd46a2cf336b-e3ec-49fc-ab50-de9b4f43e09bb413e845-ae9d-4c0a-96aa-0df52fd66006
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · unified_sip_proxy4b48c554-1c71-4ca1-9e9f-0935fd7d86d0
has vulnerable target scope1 retained · stored CVE-2021-44228 → snowsoftware · snow_commandere3711846-1b11-4861-8e7f-f8266027a380
has vulnerable target scope3 retained · stored CVE-2021-44228 → cisco · business_process_automation6baff24c-3d50-48d2-8446-8f20325a861db287e8ce-8097-4ec6-96f7-6dcb95b490e3f41e9b9e-b771-4bca-b0e8-1f26c352a645
has vulnerable target scope5 retained · stored CVE-2021-44228 → cisco · unified_intelligence_center1fa6f4de-15e6-4023-b1f8-757b543445986065a85f-980c-4252-a756-295f4d2ce4006799429d-2ab6-4eb1-a61e-ab11d6601e839f851d58-0ae5-448d-9513-acdbcdd4f738df94a334-5a00-40c3-bf58-754913a59f43
has vulnerable target scope2 retained · stored CVE-2021-44228 → siemens · desigo_cc_info_center37a0592b-3a6b-4e7d-8bda-81ad01c7c8f66a9e2249-1355-41e0-9c1a-93e80b78c481
has vulnerable target scope3 retained · stored CVE-2021-44228 → debian · debian_linux2e053d73-4b56-4d58-99a4-83866db3b51f5096f1dc-0352-4815-912d-6b5f265a73ca8ce7da96-9b9f-41f7-98fb-40f832791bfd
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · e-car_operation_center548e77af-11cb-4d38-855f-6a74132c911e
has vulnerable target scope8 retained · stored CVE-2021-44228 → cisco · identity_services_engine04fdf92c-e235-449e-8667-5ff5eaf75e060cf3131d-6552-49cd-a8f6-13a250aa91e311b0f1c2-ed17-4861-96ce-7f4c8e52f68c449a1040-ff30-4f54-922e-e42f0210c5ab563c9e8e-733d-4729-8778-f9eedf9868c059065dff-9196-40f9-a965-76f85758131c
has vulnerable target scope3 retained · stored CVE-2021-44228 → siemens · capital54926655-1a1a-4dfa-93d7-e8be3a500189588c859d-e2b9-49a5-8bd8-7dcd59dd24858e4ea53e-5e3f-4ff6-804f-a75c381c8094
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · contact_center_domain_manager2412fa6d-c919-4c33-bac8-dd4a33d61a3a
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · advanced_malware_protection_virtual_private_cloud_applianceca25e27c-88d0-450e-9dfa-4140a0fd609d
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · broadworks43434f47-8774-43b8-8f56-e5826f4f8818e4d72c5f-1222-4fb5-a66b-92682368653a
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · cyber_vision_sensor_management_extension12da5f3b-216a-44b0-8bb9-adbd9c8e7aebca2792bf-5fdc-4a44-a7f2-467bcf4425d3
has vulnerable target scope1 retained · stored CVE-2021-44228 → intel · datacenter_manager32d3aeb3-7b36-4d3d-ad4b-05871a0b0342
has vulnerable target scope1 retained · stored CVE-2021-44228 → percussion · rhythmyx90139df5-8236-4d15-a100-056402fb81d8
has vulnerable target scope2 retained · stored CVE-2021-44228 → siemens · siveillance_identity563e39fe-7880-4602-98fe-924aeeb1258b5c45ccee-5b16-4e59-a9ce-6ebf0bd67e43
has vulnerable target scope7 retained · stored CVE-2021-44228 → apache · log4j047e93c4-50c4-4d99-a846-ea1420b4f3096f514a28-3150-430b-b670-90bf2933407fbb56d94f-7eda-4bf0-b942-d5f5ba0ccc41cf9ce0af-c36c-4a51-ba04-26af7074c670eb17d55d-2942-49e6-99e6-2e5aa57c172eec586319-b23b-42db-8fe3-360b93692d4d
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · unified_contact_center_management_portal1dbdcdaf-f175-4010-9dd5-a518f8d7174e
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · cx_cloud_agenta7a01b25-b723-4416-b510-018c71461002
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · 6bk1602-0aa32-0tp0_firmware188228ff-699c-46b1-87fe-2dde8397b706
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · cloudcenter_cost_optimizerce8f5fb1-f2c9-4a4c-bbba-1c522d610c23
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · customer_experience_cloud_agentc90f12f8-602a-4618-b7e9-b054ddcb6197
has vulnerable target scope1 retained · stored CVE-2021-44228 → netapp · solidfire_enterprise_sds2cfeb5f9-fdf3-4de4-93d5-e93dce25ab55
has vulnerable target scope11 retained · stored CVE-2021-44228 → cisco · sd-wan_vmanage009fb2cf-5d7e-4eda-9d67-c933f44ae9d806053b74-8130-4b89-b7fd-442884e5556920c55dca-2b65-4f9c-acbb-6151121263d7263729aa-db7e-46fd-8444-cb137af995fa32d100b9-d496-4c34-860a-f72dc3ab128c40f8203c-bab1-400b-b7df-0bb19dacabf3
has vulnerable target scope1 retained · stored CVE-2021-44228 → netapp · cloud_secure_agent9b6823af-b71b-454b-ae3f-2b91962bf381
has vulnerable target scope11 retained · stored CVE-2021-44228 → cisco · unified_communications_manager02718d7b-6459-4e5f-92d0-faf742da208e0e43b59d-ecac-49a9-a562-80503758c80810b7e412-eb17-4740-af4a-e367d1e6c3673ecad60e-1965-49b0-94f8-2520fa0acbb95f3c6d42-ca30-4288-b5d6-96277eec83876d8737b6-7b36-43aa-89bc-d7aeb8ab4d5e
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · crosswork_network_controller088065aa-c0d3-4824-98eb-13e7a959f34dc7ef2d0e-9d96-46cd-a37f-54cdf69ff734
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · virtualized_voice_browserb9468118-dde0-463e-b875-4544b9d332c0
has vulnerable target scope1 retained · stored CVE-2021-44228 → netapp · ontap_tools776d4fb1-0af2-48a8-8eba-0db46ed29ee1
has vulnerable target scope7 retained · stored CVE-2021-44228 → cisco · smart_phy268cce6a-89b3-4350-a992-972849f468d03a39b82c-3f93-41ae-b5df-b9e9e5e2ea155e9c5510-b025-4ffe-aad8-54a81364fc47694abd37-f7c5-453e-b494-4f9102249ffe9b843d74-2941-4f74-9b85-ae64a550458cdc35694f-3780-470c-945d-b2fb86792dd4
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · nexus_dashboarda1d38616-fcc3-4ba3-bf93-f32e4fcc89eb
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · packaged_contact_center_enterprise32bcb840-6502-4bd3-85f4-93557f17f8026e437b23-c38f-4afa-bf86-3b59fa298d7c
has vulnerable target scope2 retained · stored CVE-2021-44228 → cisco · crosswork_optimization_engine3c3b6447-2ba3-4d00-bdc1-cac7a526d3bd418be195-5dc3-4b0e-9656-db69cb5bd855
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · cloudcenter_suite_admin3364c604-a4d0-4588-bdcd-186643266f63
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · energyip_prepayddf7c92c-bed4-48d3-a0b9-872acbce4b90
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · sppa-t3000_ses3000_firmwared47b5ab8-7417-4482-9bb3-305f4be2442e
has vulnerable target scope4 retained · stored CVE-2021-44228 → cisco · video_surveillance_manager1080b93f-1992-4890-baa7-72cb47e9184424f8ad6d-c5c8-44cb-aa55-6dd1098f543a5d371e8d-9222-4bb1-9efe-2fb4059c3d57f1cc5bf5-ab80-490b-9ebf-89cb45d93b99
has vulnerable target scope1 retained · stored CVE-2021-44228 → netapp · oncommand_insight4b0b64fe-3744-4e09-a3aa-3e2b724af587
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · energy_engagedd83df40-dc16-4529-9ec4-ee19e6dc8d49
has vulnerable target scope9 retained · stored CVE-2021-44228 → cisco · wan_automation_engine1cebd8af-2ad3-4fc5-b2ae-b69fcfc3b8c31f6f46de-2da5-44fa-9fd3-411cc1f8bc5d24c293b7-61ab-4450-81d3-5562864ca36c28a9f369-8ce3-44cf-9a17-1dfb7de481a052a32427-2433-4a44-9622-36940c7abdea65f09e64-32d8-4c2b-8022-30876f48d492
has vulnerable target scope1 retained · stored CVE-2021-44228 → siemens · 6bk1602-0aa42-0tp0_firmwarebf4172d5-5b60-4915-a6ce-8158acbd3bfe
has vulnerable target scope1 retained · stored CVE-2021-44228 → cisco · dna_spaces_connectore1c61bc2-f542-4495-8a70-b9d9b5b7ad4e
has vulnerable target scope9 retained · stored CVE-2021-44228 → cisco · paging_server078df214-a958-4dab-9470-ec9c4bd849664cd7de57-d50a-4757-8493-2a3ec17ac15a6dc7303f-4095-4fe2-a0e3-873f65ff303b943922cb-c8cb-4a0a-8db1-b1f4d35b8501b427f4c9-a444-4a28-b26d-9c088b6e6719b51da858-cec5-4348-b530-f001bb7604ad