CASCACascade Atlas

Evidence dossier

CVE-2021-44228

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Exploited in the wild (CISA KEV since Dec 10, 2021). NVD reports CVSS 3.1 10.0. EPSS estimates 100.0% exploit likelihood as of Jul 18, 2026.

85.0–100.0Priority evidence range
Evidence through Oct 22, 2026, 6:07 PM UTC

As of Oct 22, 2026

Normalized restatement

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

State
PUBLISHED
Published
Dec 10, 2021
Updated
Oct 21, 2025
Evidence coverage
85%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    apache

    Record text: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    Inspect raw assertion
    Field
    container
    Value
    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 100% probability · 100th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.999990000000; percentile 1.000000000000
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Apache Log4j2 Remote Code Execution Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Apache Log4j2 Remote Code Execution Vulnerability
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Dec 10, 2021 · first observed Sep 1, 2026

Exploit likelihood100.00%

FIRST EPSS · score date Jul 18, 2026 · 100th percentile · first observed Jul 19, 2026

SeverityCVSS 10.0

NVD · CVSS 3.1 · first observed Aug 11, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

Outside this view’s verified evidence

Reason detail begins outside this selected snapshot; the state remains source-bound.

Source comparison

Who said what

apacheOriginal assertion
Record text

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Inspect raw assertion
Field
container
Value
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

100% probability · 100th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.999990000000; percentile 1.000000000000
Source dateFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Apache Log4j2 Remote Code Execution Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Apache Log4j2 Remote Code Execution Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
396Underlying assertions
168Canonical products
373Target assertions
23Constraint assertions

Grouped from 27 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

169 scope groups

apache · source assertedApache Software FoundationApache Log4j2Direct source scope
Affected: 2.0-beta9 to before log4j-core* (custom comparison)
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "2.0-beta9", "lessThan": "log4j-core*", "versionType": "custom"}]
NVD CPE · APPLICATIONapachelog4jVulnerable target · 7 assertions
Any version (unconstrained) (>= 2.0.1, < 2.3.1); Any version (unconstrained) (>= 2.13.0, < 2.15.0); Any version (unconstrained) (>= 2.4.0, < 2.12.2); Version 2.0Canonical identity product-4d7e56fc391d105ec36b193aacbe3e6861c2d772e486308d663db91ce4edf389Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    17854e42-7063-4a55-bf2a-4c7074cc2d60
  2. cpe:2.3:a:apache:log4j:2.0:rc2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ef24312d-1a62-482e-8078-7ec24758b710
  3. cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    53f32fb2-6970-4975-8bd0-eae12e9ad03a
  4. cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b773ed91-1d39-42e6-9c52-d02210de1a94
  5. cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 1
    Logic
    OR
    Version bounds
    from including 2.4.0; through excluding 2.12.2
    Match ID
    aed3d5ec-dad5-4e5f-8bbd-b4e3349d84fc
  6. cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 2
    Logic
    OR
    Version bounds
    from including 2.13.0; through excluding 2.15.0
    Match ID
    d31d423d-fc4d-428a-b863-55af472b80dc
  7. cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 0
    Logic
    OR
    Version bounds
    from including 2.0.1; through excluding 2.3.1
    Match ID
    03fa5e81-f9c0-403e-8a4b-e4284e4e7b72
NVD CPE · APPLICATIONapplexcodeVulnerable target · 1 assertions
Any version (unconstrained) (< 13.3)Canonical identity product-b1ba56e48fb18ebd9e6473b135befea0c97422907c218dc623981b389d3fe99cLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    19 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 13.3
    Match ID
    e0755e91-2f36-4ec3-8727-e8bf0427e663
NVD CPE · APPLICATIONbentleysynchroVulnerable target · 1 assertions
Any version (unconstrained) (>= 6.1, < 6.2.4.2)Canonical identity product-96eb8f770035c283df52b25f1521d87004682aa9808164c42a3d4dd0e04ba4d6Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:bentley:synchro:*:*:*:*:pro:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    17 · node/0 · match 0
    Logic
    OR
    Version bounds
    from including 6.1; through excluding 6.2.4.2
    Match ID
    452d8730-f273-4ab4-9221-e82ec2caafd8
NVD CPE · APPLICATIONbentleysynchro_4dVulnerable target · 1 assertions
Any version (unconstrained) (< 6.4.3.2)Canonical identity product-a547d2f8ff7da5a146e309a3e6ede2c5c0ad1f5aa9fc797d69c93effb8bc50e5Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:bentley:synchro_4d:*:*:*:*:pro:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    17 · node/0 · match 1
    Logic
    OR
    Version bounds
    through excluding 6.4.3.2
    Match ID
    f2ef5054-eecb-4489-b27a-aacb96b25b97
NVD CPE · APPLICATIONciscoadvanced_malware_protection_virtual_private_cloud_applianceVulnerable target · 1 assertions
Any version (unconstrained) (< 3.5.4)Canonical identity product-42fb6a163b15da35973809e60d1ed4540c3f832abe279c8296082976eeb2888bLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:advanced_malware_protection_virtual_private_cloud_appliance:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 3.5.4
    Match ID
    4e52af19-0158-451b-8e36-02cb6406083f
NVD CPE · APPLICATIONciscoautomated_subsea_tuningVulnerable target · 2 assertions
Any version (unconstrained) (< 2.1.0); Version 02.01.00Canonical identity product-7f4e41b56658416aede857163195feaeaea493459613436f40d48f834b696d7dLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:automated_subsea_tuning:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 1
    Logic
    OR
    Version bounds
    through excluding 2.1.0
    Match ID
    cb21cfb4-4492-4c5d-bd07-ffbe8b5d92b6
  2. cpe:2.3:a:cisco:automated_subsea_tuning:02.01.00:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a4d28e76-56d4-4c9a-a660-7cd7e0a1ac9f
NVD CPE · APPLICATIONciscobroadworksVulnerable target · 2 assertions
Any version (unconstrained) (< 2021.11_1.162); Version not applicableCanonical identity product-4585cfb5ebb11b12f9043c09987ea048af9776c79cab19d4a257a7c99fc7e94eLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:broadworks:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 2
    Logic
    OR
    Version bounds
    through excluding 2021.11_1.162
    Match ID
    97426511-9b48-46f5-ac5c-f9781f1bae2f
  2. cpe:2.3:a:cisco:broadworks:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    cd975a0e-00a6-475e-9064-1d64e4291499
NVD CPE · APPLICATIONciscobusiness_process_automationVulnerable target · 3 assertions
Any version (unconstrained) (< 3.0.000.115); Any version (unconstrained) (>= 3.1.000.000, < 3.1.000.044); Any version (unconstrained) (>= 3.2.000.000, < 3.2.000.009)Canonical identity product-364e1e4d7e29948d0c858987580f80a37236abf4b7817e9e28346fe5956cc208Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 5
    Logic
    OR
    Version bounds
    from including 3.2.000.000; through excluding 3.2.000.009
    Match ID
    e4c6f9e0-5dce-431d-ae7e-b680ac1f9332
  2. cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 4
    Logic
    OR
    Version bounds
    from including 3.1.000.000; through excluding 3.1.000.044
    Match ID
    4c903c85-dc0f-47d8-b8be-7a666877b017
  3. cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 3
    Logic
    OR
    Version bounds
    through excluding 3.0.000.115
    Match ID
    82306b9f-ae97-4e29-a8f7-2e5ba52998a7
NVD CPE · APPLICATIONciscocloudcenterVulnerable target · 1 assertions
Any version (unconstrained) (< 4.10.0.16)Canonical identity product-bfc84bc8addd80b4b298390066ed94ad3266970788bee4fc71acd567e1657ebcLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:cloudcenter:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 7
    Logic
    OR
    Version bounds
    through excluding 4.10.0.16
    Match ID
    622bb8d9-ac81-4c0f-a5c5-c5e51f0bc0d1
NVD CPE · APPLICATIONciscocloudcenter_cost_optimizerVulnerable target · 1 assertions
Any version (unconstrained) (< 5.5.2)Canonical identity product-5061322e0d6320a0f79b96900611f76f79864da90b132022edda26a1f210a90eLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:cloudcenter_cost_optimizer:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 8
    Logic
    OR
    Version bounds
    through excluding 5.5.2
    Match ID
    38fb3ce1-5f62-4798-a825-4e3db07e868f
NVD CPE · APPLICATIONciscocloudcenter_suiteVulnerable target · 5 assertions
Version 4.10.0.15; Version 5.3.0; Version 5.4.1; Version 5.5.0; Version 5.5.1Canonical identity product-1b72c45e11d8985c0a258456db294710ea892c7e55be5948407ce69699e0fe2eLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:cloudcenter_suite:4.10.0.15:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9c6ee38c-5396-4ace-8fa3-b147251c6d9f
  2. cpe:2.3:a:cisco:cloudcenter_suite:5.5.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    777c92ac-a9b6-4204-99d1-ea7e3ee366a3
  3. cpe:2.3:a:cisco:cloudcenter_suite:5.3.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e5569201-9a97-481e-96fd-7f41697bd5ea
  4. cpe:2.3:a:cisco:cloudcenter_suite:5.4.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    10a33c3d-5890-430b-9284-3e28f03adae8
  5. cpe:2.3:a:cisco:cloudcenter_suite:5.5.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5a908014-8e8b-477d-9e81-3801f43723bb
NVD CPE · APPLICATIONciscocloudcenter_suite_adminVulnerable target · 1 assertions
Any version (unconstrained) (< 5.3.1)Canonical identity product-652a5d699f7f7b01ccad3212fcbeb2713ef0e8f1eaff561a3e9013e594e04578Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:cloudcenter_suite_admin:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 9
    Logic
    OR
    Version bounds
    through excluding 5.3.1
    Match ID
    29cdb878-b085-448e-ab84-25b1e2d024f8
NVD CPE · APPLICATIONciscocloudcenter_workload_managerVulnerable target · 1 assertions
Any version (unconstrained) (< 5.5.2)Canonical identity product-d96129bc93154d407116023c3738730a6da71f2f79e422466ba79fc8590f0be4Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:cloudcenter_workload_manager:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 10
    Logic
    OR
    Version bounds
    through excluding 5.5.2
    Match ID
    c25fda96-9490-431f-b8b6-cc2cc272670e
NVD CPE · APPLICATIONciscocloud_connectVulnerable target · 1 assertions
Any version (unconstrained) (< 12.6\(1\))Canonical identity product-f2b74c57c9404f3cbe974981d354f806bd9baa8bc4a03d472d0ee11120a1d914Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:cloud_connect:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 6
    Logic
    OR
    Version bounds
    through excluding 12.6\(1\)
    Match ID
    52cf6199-8028-4076-952b-855984f30129
NVD CPE · APPLICATIONciscocommon_services_platform_collectorVulnerable target · 9 assertions
Any version (unconstrained) (>= 2.10.0, < 2.10.0.1); Any version (unconstrained) (< 2.9.1.3); Version 002.009(000.000); Version 002.009(000.001); Version 002.009(000.002); Version 002.009(001.000); Version 002.009(001.001); Version 002.009(001.002); Version 002.010(000.000)Canonical identity product-daf9cdc0b5b3998cefbe5e9aa76cd17cc4de29b06637062cd5d05aa6ad55cb97Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:common_services_platform_collector:002.009\(001.002\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 12
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    158b7a53-fec1-4b42-a1e2-e83e99564b07
  2. cpe:2.3:a:cisco:common_services_platform_collector:002.009\(000.001\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3f0f1639-d69e-473a-8926-827ccf73acc9
  3. cpe:2.3:a:cisco:common_services_platform_collector:002.009\(001.000\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 10
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1859bd43-ba2b-45a5-b523-c6bfd34c7b01
  4. cpe:2.3:a:cisco:common_services_platform_collector:002.010\(000.000\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3a378971-1a08-4914-b012-8e24dcdefc68
  5. cpe:2.3:a:cisco:common_services_platform_collector:002.009\(001.001\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 11
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1ebc145c-9a2f-4b76-953e-0f690314511c
  6. cpe:2.3:a:cisco:common_services_platform_collector:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 11
    Logic
    OR
    Version bounds
    through excluding 2.9.1.3
    Match ID
    51cd9e4c-9385-435c-ad18-6c36c8df7b65
  7. cpe:2.3:a:cisco:common_services_platform_collector:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 12
    Logic
    OR
    Version bounds
    from including 2.10.0; through excluding 2.10.0.1
    Match ID
    fc0ac4c1-cb06-4084-bfbb-5b702c384c53
  8. cpe:2.3:a:cisco:common_services_platform_collector:002.009\(000.002\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f4fdf900-e9d6-454a-bf6b-821620ca59f4
  9. cpe:2.3:a:cisco:common_services_platform_collector:002.009\(000.000\):*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    bac1a386-04c7-45b2-a883-1cd9ab60c14b
NVD CPE · APPLICATIONciscoconnected_mobile_experiencesVulnerable target · 1 assertions
Version not applicableCanonical identity product-dc7d7adfe50f1fd081ca3b9776e4791a048f385df865e8fbca88705b5cf42e33Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:connected_mobile_experiences:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3871ebd2-f270-435a-b98c-a282e1c52693
NVD CPE · APPLICATIONciscocontact_center_domain_managerVulnerable target · 1 assertions
Any version (unconstrained) (< 12.5\(1\))Canonical identity product-42e3b076671932c0939996e292a6bb9586c520ccd58d4bc0cc8d38bb5db938bcLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:contact_center_domain_manager:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 14
    Logic
    OR
    Version bounds
    through excluding 12.5\(1\)
    Match ID
    8d4df34b-e8c2-41c8-90e2-d119b50e4e7e
NVD CPE · APPLICATIONciscocontact_center_management_portalVulnerable target · 1 assertions
Any version (unconstrained) (< 12.5\(1\))Canonical identity product-d0276545a78cf2ba6a7183e1239d64466ed165c70a5cf8e31af6cb9d99b85c15Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:contact_center_management_portal:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 15
    Logic
    OR
    Version bounds
    through excluding 12.5\(1\)
    Match ID
    c8ef64da-73e4-4e5e-8f9a-b837c947722e
NVD CPE · APPLICATIONciscocrosswork_data_gatewayVulnerable target · 2 assertions
Any version (unconstrained) (< 2.0.2); Version 3.0.0Canonical identity product-92616884c37306fc8794ae010618f83d6050f2570e1ee05f20d936b5324614d1Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:crosswork_data_gateway:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 16
    Logic
    OR
    Version bounds
    through excluding 2.0.2
    Match ID
    66e1e4fc-0b6e-4cfa-b003-91912f8785b2
  2. cpe:2.3:a:cisco:crosswork_data_gateway:3.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 17
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1b2390c3-c319-4f05-8cf0-0d30f9931507
NVD CPE · APPLICATIONciscocrosswork_network_automationVulnerable target · 5 assertions
Version 2.0.0; Version 3.0.0; Version 4.1.0; Version 4.1.1; Version not applicableCanonical identity product-b91190c15ac599dee5eda617cda1d1859cbc6d7d0379368a070c882f0590d089Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:crosswork_network_automation:4.1.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 18
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f60324dd-8450-4b14-a7a1-0d5ea5163580
  2. cpe:2.3:a:cisco:crosswork_network_automation:4.1.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 17
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    60d2fbf3-d8ab-41f0-b170-9e56fbf7e2f7
  3. cpe:2.3:a:cisco:crosswork_network_automation:3.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 16
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c19679d0-f4dc-4130-affd-692e5130531a
  4. cpe:2.3:a:cisco:crosswork_network_automation:2.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 15
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f526def1-4a3e-4fe1-8153-e9252dae5b92
  5. cpe:2.3:a:cisco:crosswork_network_automation:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    15 · node/0 · match 14
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2f429f37-3576-4d8a-9901-359d65ec3cf4
NVD CPE · APPLICATIONciscocrosswork_network_controllerVulnerable target · 2 assertions
Any version (unconstrained) (< 2.0.1); Version 3.0.0Canonical identity product-563f7c2cb6d922b2ae101e29637549b4b37f27656f9829ce17c4d2a61dcf7d94Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 18
    Logic
    OR
    Version bounds
    through excluding 2.0.1
    Match ID
    c154491e-06c7-48b0-ac1d-89bbdbdb902e
  2. cpe:2.3:a:cisco:crosswork_network_controller:3.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 19
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1e98ec48-0ced-4e02-9ccb-06ef751f2bdc
NVD CPE · APPLICATIONciscocrosswork_optimization_engineVulnerable target · 2 assertions
Any version (unconstrained) (< 2.0.1); Version 3.0.0Canonical identity product-5ef8158896a5007168b9ebdbfa8a0114e53ad03c5a7021ee18d1e78150fe2c64Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:crosswork_optimization_engine:3.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 21
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    258a51ac-6649-4f67-a842-48a7ae4dcee1
  2. cpe:2.3:a:cisco:crosswork_optimization_engine:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 20
    Logic
    OR
    Version bounds
    through excluding 2.0.1
    Match ID
    c569dc2a-cff6-4e13-a50c-e215a4f96d99
NVD CPE · APPLICATIONciscocrosswork_platform_infrastructureVulnerable target · 2 assertions
Any version (unconstrained) (< 4.0.1); Version 4.1.0Canonical identity product-c536d6ec0cf15988b06e85309a089b90d03da1589b93c23282f6f4ebe5beb0a6Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:crosswork_platform_infrastructure:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 22
    Logic
    OR
    Version bounds
    through excluding 4.0.1
    Match ID
    8dc22505-de11-4a1b-8c06-1e306419b031
  2. cpe:2.3:a:cisco:crosswork_platform_infrastructure:4.1.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 23
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9e31ac54-b928-48b5-8293-f5f4a7a8c293
NVD CPE · APPLICATIONciscocrosswork_zero_touch_provisioningVulnerable target · 2 assertions
Any version (unconstrained) (< 2.0.1); Version 3.0.0Canonical identity product-07d1911e5dfe73ef44ee2ed85187496b5a431e58793cac536dfcd97a4587f973Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:crosswork_zero_touch_provisioning:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 24
    Logic
    OR
    Version bounds
    through excluding 2.0.1
    Match ID
    5b8ae870-6fd0-40d2-958b-548e2d7a7b75
  2. cpe:2.3:a:cisco:crosswork_zero_touch_provisioning:3.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 25
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    68e7d83b-b6ac-45b1-89a4-d18d7a6018dd

Affected-product evidence

Accepted scope and product mapping

0 canonical links · 0 source-reported links

Applicability remains source-scoped; safety and exposure remain unassessed.

Assessments

CVSS by origin

10.0
NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.3
NVDCVSS 2.0 · role Primary · priority eligiblevalid_matchAV:N/AC:M/Au:N/C:C/I:C/A:C
10.0
CVE Program sourceCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10.0
CISA-ADPCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.