Sploitus

8 exploited vulnerabilities in Log4J

Vulnerabilities with publicly known exploits

Vendors
Almalinux, Astra Linux, Centos, Atlassian, Linux Mint, Apache
With known exploits
8
Affected Apache log4j versions
≤ 1.2.17, 2.0, 1.2
Affected b3log Symphony versions
≤ 3.6.3
Affected Amazon log4jhotpatch versions
< 1.1-13, 1.1-16

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2022-23305 2 exploits
CVSS 9.8 CRITICAL 2022-01-10FIX AVAILABLE
CVE-2019-17571 6 exploits
CVSS 9.8 CRITICAL 2017-08-07FIX AVAILABLE
CVE-2024-23049
CVSS 9.8 CRITICAL 2024-02-05FIX AVAILABLE
CVE-2021-3100
CVSS 8.8 HIGH 2022-04-19FIX AVAILABLE
CVE-2022-23302
CVSS 8.8 HIGH 2022-01-10FIX AVAILABLE
CVE-2022-0070
CVSS 8.8 HIGH 2021-12-17
CVE-2023-26464
CVSS 7.5 HIGH 2023-03-10FIX AVAILABLE
CVE-2021-4104 11 exploits
CVSS 7.5 HIGH 2021-12-10FIX AVAILABLE