VDB

BDU%3A2021-01051

BDU%3A2021-01051 PUBLISHED CVSS 10 CRITICAL

Уязвимость библиотеки журналирования Java-программ Log4j, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
Oracle Corp., Apache Software FoundationWebLogic Server, Enterprise Manager Ops Center, Enterprise Repository, Retail Back Office, Retail Central Office, Retail Returns Management, Retail Point-of-Service, JD Edwards EnterpriseOne Tools, Managed File Transfer, Oracle Endeca Information Discovery Integrator, Oracle JDeveloper, Oracle Retail Invoice Matching, Oracle Retail Order Broker, Instantis EnterpriseTrack, Communications WebRTC Session Controller, Endeca Server, JD Edwards World Security, Utilities Framework, Application Testing Suite, Communications Instant Messaging Server, Oracle Communications Interactive Session Recorder, Oracle Endeca Information Discovery Studio, Communications Online Mediation Controller, Retail Integration Bus, Communications Converged Application Server, Oracle Communications Service Broker, Primavera Gateway, Oracle Big Data Discovery, Identity Manager Connector, Retail Advanced Inventory Planning, MICROS Lucas, Tape Library ACSLS, Oracle Retail Service Backbone, Rapid Planning, Oracle FLEXCUBE Investor Servicing, Oracle FLEXCUBE Private Banking, Oracle Communications Network Integrity, Oracle Financial Services Lending and Leasing, Oracle Retail Extract Transform and Load, Communications Diameter Signaling Router, FLEXCUBE Core Banking, Oracle TimesTen In-Memory Database, Oracle Communications ASAP, Log4j, Oracle Communications Pricing Design Center, Oracle GoldenGate Application Adapters, Financial Services Compliance Regulatory Reporting, Oracle Communications Unified Inventory Management, Retail Xstore Point of Service

Timeline

  • Mar 2, 2021 CVE Published
  • Dec 16, 2021 CVE Updated

References

…and 27 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›