Dashboard / CVE-2021-44228

CVE-2021-44228

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product Apache — Log4j2
Date Added 2021-12-10
Remediation Due 2021-12-24
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2021-44228

Weakness Classification (4)

Affected Software (373)

VendorProductVersion
apache log4j 2.0.1 – 2.3.1
apache log4j 2.4.0 – 2.12.2
apache log4j 2.13.0 – 2.15.0
apache log4j 2.0
apache log4j 2.0
apache log4j 2.0
apache log4j 2.0
apple xcode < 13.3
bentley synchro 6.1 – 6.2.4.2
bentley synchro_4d < 6.4.3.2
cisco advanced_malware_protection_virtual_private_cloud_appliance < 3.5.4
cisco automated_subsea_tuning < 2.1.0
cisco automated_subsea_tuning 02.01.00
cisco broadworks < 2021.11_1.162
cisco broadworks -
cisco business_process_automation < 3.0.000.115
cisco business_process_automation 3.1.000.000 – 3.1.000.044
cisco business_process_automation 3.2.000.000 – 3.2.000.009
cisco cloud_connect < 12.6\(1\)
cisco cloudcenter < 4.10.0.16
cisco cloudcenter_cost_optimizer < 5.5.2
cisco cloudcenter_suite 4.10.0.15
cisco cloudcenter_suite 5.3.0
cisco cloudcenter_suite 5.4.1
cisco cloudcenter_suite 5.5.0
cisco cloudcenter_suite 5.5.1
cisco cloudcenter_suite_admin < 5.3.1
cisco cloudcenter_workload_manager < 5.5.2
cisco common_services_platform_collector < 2.9.1.3
cisco common_services_platform_collector 2.10.0 – 2.10.0.1
Showing 30 of 373 entries

References & Advisories (52)

https://www.kb.cert.org/vuls/id/930724
Third Party Advisory US Government Resource
Showing 25 of 52 references

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links