2017-04-17 23:59:00 2019-06-19 02:15:10

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Oracle Policy automation for mobile devices 10.4.7 (not an official CPE) Oracle Policy automation connector for siebel 10.4.6 (not an official CPE) Oracle Policy automation 12.2.10 (not an official CPE) Oracle Policy automation 12.2.9 (not an official CPE) Oracle Policy automation 12.2.8 (not an official CPE) Oracle Policy automation 12.2.7 (not an official CPE) Oracle Policy automation 12.2.6 (not an official CPE) Oracle Policy automation 12.2.5 (not an official CPE) Oracle Policy automation 12.2.4 (not an official CPE) Oracle Policy automation 12.2.3 (not an official CPE) Oracle Policy automation 12.2.2 (not an official CPE) Oracle Policy automation 12.2.1 (not an official CPE) Oracle Policy automation 12.2.0 (not an official CPE) Oracle Policy automation 12.1.1 (not an official CPE) Oracle Policy automation 12.1.0 (not an official CPE) Oracle Policy automation 10.4.7 (not an official CPE) Oracle Peoplesoft enterprise fin install 9.2 (not an official CPE) Oracle Mysql enterprise monitor 3.4.2.4181 (not an official CPE) Oracle Jdeveloper 12.2.1.3.0 (not an official CPE) Oracle Jdeveloper 12.1.3.0.0 (not an official CPE) Oracle Jdeveloper 11.1.1.9.0 (not an official CPE) Oracle Jd edwards enterpriseone tools 9.2 (not an official CPE) Oracle Insurance rules palette 11.1 (not an official CPE) Oracle Insurance rules palette 11.0 (not an official CPE) Oracle Insurance rules palette 10.2 (not an official CPE) Oracle Insurance rules palette 10.1 (not an official CPE) Oracle Insurance rules palette 10.0 (not an official CPE) Oracle Insurance policy administration 11.0 (not an official CPE) Oracle Insurance policy administration 10.2 (not an official CPE) Oracle Insurance policy administration 10.1 (not an official CPE) Oracle Insurance policy administration 10.0 (not an official CPE) Oracle Insurance calculation engine 10.2.1 (not an official CPE) Oracle Insurance calculation engine 10.1.1 (not an official CPE) Oracle Identity management suite 12.2.1.3.0 (not an official CPE) Oracle Identity management suite 11.1.2.3.0 (not an official CPE) Oracle Identity analytics 11.1.1.5.8 (not an official CPE) Oracle Goldengate application adapters 12.3.2.1.1 (not an official CPE) Oracle Fusion middleware mapviewer 12.2.1.3 (not an official CPE) Oracle Fusion middleware mapviewer 12.2.1.2 (not an official CPE) Oracle Flexcube investor servicing 14.0.0 (not an official CPE) Oracle Flexcube investor servicing 12.4.0 (not an official CPE) Oracle Flexcube investor servicing 12.3.0 (not an official CPE) Oracle Flexcube investor servicing 12.1.0 (not an official CPE) Oracle Flexcube investor servicing 12.0.4 (not an official CPE) Oracle Financial services profitability management 8.0.5.0.0 (not an official CPE) Oracle Financial services profitability management 8.0.4.0.0 (not an official CPE) Oracle Financial services profitability management 8.0.3.0.0 (not an official CPE) Oracle Financial services profitability management 8.0.2.0.0 (not an official CPE) Oracle Financial services profitability management 8.0.1.0.0 (not an official CPE) Oracle Financial services profitability management 8.0.0.0.0 (not an official CPE) Oracle Financial services profitability management 6.1.1 (not an official CPE) Oracle Financial services loan loss forecasting and provisioning 8.0.5 (not an official CPE) Oracle Financial services loan loss forecasting and provisioning 8.0.4 (not an official CPE) Oracle Financial services hedge management and ifrs valuations 8.0.5 (not an official CPE) Oracle Financial services hedge management and ifrs valuations 8.0.4 (not an official CPE) Oracle Financial services behavior detection platform 6.1.1 (not an official CPE) Oracle Financial services analytical applications infrastructure 8.0.5.0.0 (not an official CPE) Oracle Financial services analytical applications infrastructure 8.0.4.0.0 (not an official CPE) Oracle Financial services analytical applications infrastructure 8.0.3.0.0 (not an official CPE) Oracle Financial services analytical applications infrastructure 8.0.2.0.0 (not an official CPE) Oracle Financial services analytical applications infrastructure 8.0.1.0.0 (not an official CPE) Oracle Financial services analytical applications infrastructure 8.0.0.0.0 (not an official CPE) Oracle Enterprise manager for peoplesoft 13.2.1.1 (not an official CPE) Oracle Enterprise manager for peoplesoft 13.1.1.1 (not an official CPE) Oracle Enterprise manager for oracle database 13.2.2 (not an official CPE) Oracle Enterprise manager for oracle database 12.1.0.8 (not an official CPE) Oracle Enterprise manager for mysql database 13.2.2.0.0 (not an official CPE) Oracle Enterprise manager for fusion middleware 13.2.0.0 (not an official CPE) Oracle Enterprise manager for fusion middleware 12.1.0.5 (not an official CPE) Oracle Enterprise manager base platform 13.2.0.0 (not an official CPE) Oracle Enterprise manager base platform 12.1.0.5 (not an official CPE) Oracle Enterprise data quality 12.2.1.3.0 (not an official CPE) Oracle Configuration manager 12.1.2.0.5 (not an official CPE) Oracle Configuration manager 12.1.2.0.2 (not an official CPE) Oracle Communications service broker 6.0 (not an official CPE) Oracle Communications pricing design center 12.0 (not an official CPE) Oracle Communications pricing design center 11.1 (not an official CPE) Oracle Communications online mediation controller 6.1 (not an official CPE) Oracle Communications messaging server 8.0 (not an official CPE) Oracle Communications messaging server 7.0.5 (not an official CPE) Oracle Communications messaging server 7.0 (not an official CPE) Oracle Communications messaging server 6.3 (not an official CPE) Oracle Communications converged application server - service controller 6.1 (not an official CPE) Oracle Bi publisher 12.2.1.4.0 (not an official CPE) Oracle Bi publisher 12.2.1.3.0 (not an official CPE) Oracle Bi publisher 11.1.1.9.0 (not an official CPE) Oracle Bi publisher 11.1.1.7.0 (not an official CPE) Oracle Banking platform 2.6.2 (not an official CPE) Oracle Banking platform 2.6.1 (not an official CPE) Oracle Banking platform 2.6.0 (not an official CPE) Oracle Autovue vuelink integration 21.0.1 (not an official CPE) Oracle Autovue vuelink integration 21.0.0 (not an official CPE) Oracle Api gateway 11.1.2.4.0 (not an official CPE) Netapp Storage automation store - (not an official CPE) Netapp Snapcenter - (not an official CPE) Netapp Service level manager - (not an official CPE) Netapp Oncommand workflow automation - (not an official CPE) Netapp Oncommand insight - (not an official CPE) Netapp Oncommand api services - (not an official CPE) Apache Log4j 2.8.1 (not an official CPE) Apache Log4j 2.8 (not an official CPE) Apache Log4j 2.7 (not an official CPE) Apache Log4j 2.6.2 (not an official CPE) Apache Log4j 2.6.1 (not an official CPE) Apache Log4j 2.6 (not an official CPE) Apache Log4j 2.5 (not an official CPE) Apache Log4j 2.4.1 (not an official CPE) Apache Log4j 2.4 (not an official CPE) Apache Log4j 2.3 (not an official CPE) Apache Log4j 2.2 (not an official CPE) Apache Log4j 2.1 (not an official CPE) Apache Log4j 2.0.2 (not an official CPE) Apache Log4j 2.0.1 (not an official CPE) Apache Log4j 2.0 Rc2 (not an official CPE) Apache Log4j 2.0 Rc1 (not an official CPE) Apache Log4j 2.0 Beta9 (not an official CPE) Apache Log4j 2.0 Beta8 (not an official CPE) Apache Log4j 2.0 Beta7 (not an official CPE) Apache Log4j 2.0 Beta6 (not an official CPE) Apache Log4j 2.0 Beta5 (not an official CPE) Apache Log4j 2.0 Beta4 (not an official CPE) Apache Log4j 2.0 Beta3 (not an official CPE) Apache Log4j 2.0 Beta2 (not an official CPE) Apache Log4j 2.0 Beta1 (not an official CPE) Apache Log4j 2.0 Alpha2 (not an official CPE) Apache Log4j 2.0 Alpha1 (not an official CPE) Oracle Policy automation for mobile devices 12.1.0 (not an official CPE) Oracle Policy automation for mobile devices 12.1.1 (not an official CPE) Oracle Policy automation for mobile devices 12.2.0 (not an official CPE) Oracle Policy automation for mobile devices 12.2.1 (not an official CPE) Oracle Policy automation for mobile devices 12.2.2 (not an official CPE) Oracle Policy automation for mobile devices 12.2.3 (not an official CPE) Oracle Policy automation for mobile devices 12.2.4 (not an official CPE) Oracle Policy automation for mobile devices 12.2.5 (not an official CPE) Oracle Policy automation for mobile devices 12.2.6 (not an official CPE) Oracle Policy automation for mobile devices 12.2.7 (not an official CPE) Oracle Policy automation for mobile devices 12.2.8 (not an official CPE) Oracle Policy automation for mobile devices 12.2.9 (not an official CPE) Oracle Policy automation for mobile devices 12.2.10 (not an official CPE) Oracle Retail clearance optimization engine 14.0.5 (not an official CPE) Oracle Retail extract transform and load 13.0 (not an official CPE) Oracle Retail extract transform and load 13.1 (not an official CPE) Oracle Retail extract transform and load 13.2 (not an official CPE) Oracle Retail integration bus 14.0.0 (not an official CPE) Oracle Retail integration bus 14.1.0 (not an official CPE) Oracle Retail integration bus 15.0 (not an official CPE) Oracle Retail integration bus 16.0 (not an official CPE) Oracle Retail open commerce platform 5.3.0 (not an official CPE) Oracle Retail open commerce platform 6.0.0 (not an official CPE) Oracle Retail open commerce platform 6.0.1 (not an official CPE) Oracle Retail predictive application server 15.0.3 (not an official CPE) Oracle Siebel ui framework 18.7 (not an official CPE) Oracle Siebel ui framework 18.8 (not an official CPE) Oracle Siebel ui framework 18.9 (not an official CPE) Oracle Soa suite 12.1.3.0.0 (not an official CPE) Oracle Soa suite 12.2.2.0.0 (not an official CPE) Oracle Tape library acsls 8.4 (not an official CPE) Oracle Utilities work and asset management 1.9.1.2.12 (not an official CPE)
Oracle - Policy automation for mobile devices Oracle - Policy automation connector for siebel Oracle - Policy automation Oracle - Peoplesoft enterprise fin install Oracle - Mysql enterprise monitor Oracle - Jdeveloper Oracle - Jd edwards enterpriseone tools Oracle - Insurance rules palette Oracle - Insurance policy administration Oracle - Insurance calculation engine Oracle - Identity management suite Oracle - Identity analytics Oracle - Goldengate application adapters Oracle - Fusion middleware mapviewer Oracle - Flexcube investor servicing Oracle - Financial services profitability management Oracle - Financial services loan loss forecasting and provisioning Oracle - Financial services hedge management and ifrs valuations Oracle - Financial services behavior detection platform Oracle - Financial services analytical applications infrastructure Oracle - Enterprise manager for peoplesoft Oracle - Enterprise manager for oracle database Oracle - Enterprise manager for mysql database Oracle - Enterprise manager for fusion middleware Oracle - Enterprise manager base platform Oracle - Enterprise data quality Oracle - Configuration manager Oracle - Communications service broker Oracle - Communications pricing design center Oracle - Communications online mediation controller Oracle - Communications messaging server Oracle - Communications converged application server - service controller Oracle - Bi publisher Oracle - Banking platform Oracle - Autovue vuelink integration Oracle - Api gateway Netapp - Storage automation store Netapp - Snapcenter Netapp - Service level manager Netapp - Oncommand workflow automation Netapp - Oncommand insight Netapp - Oncommand api services Apache - Log4j Oracle - Retail clearance optimization engine Oracle - Retail extract transform and load Oracle - Retail integration bus Oracle - Retail open commerce platform Oracle - Retail predictive application server Oracle - Siebel ui framework Oracle - Soa suite Oracle - Tape library acsls Oracle - Utilities work and asset management Redhat - Enterprise linux Redhat - Enterprise linux desktop Redhat - Enterprise linux server Redhat - Enterprise linux server aus Redhat - Enterprise linux server eus Redhat - Enterprise linux server tus Redhat - Enterprise linux workstation