CVE-2021-44228 Apache Log4j2
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Apache Log4j2 Remote Code Execution Vulnerability
- Added
- 2021-12-10
- Federal patch deadline
- 2021-12-24
- Ransomware use
- known