SQL injection in JDBC Appender in Apache Log4j V1
Published Jan 18, 2022
9.8
CRITICALCVSS 3.1
EPSS 66.54%
Description
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Affected products
-
- Version 1.2.1StatusaffectedConstraints<unspecified
- Version unspecifiedStatusaffectedConstraints<2.0-alpha1
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Apache Software Foundation | Apache Log4j 1.x | n/a |
|
Configuration 2
- n/a
- n/a
Configuration 3
- n/a
Configuration 5
- 12.1
- 12.2
- 5.9.0.0.0
- 12.2.1.3.0
- 12.2.1.4.0
- 12.2.1.3.0
- 12.2.1.4.0
- 4.5
- 10.0.1.5.0
- 8.1
- 7.3.6
- < 12.0.0.4.4
- 12.0.0.5.0
- 7.4.1
- 7.4.2
- < 2.2.1.1.1
- 2.2.1.1.1
- ≥ 12.2.3 · ≤ 12.2.11
- 13.4.0.0
- 13.5.0.0
- 2.7.0.0
- 2.7.0.1
- 2.8.0.0
- 8.1.0
- < 11.2.8.0
- < 11.2.8.0
- 12.2.1.3.0
- 12.2.1.4.0
- 11.1.1.5.0
- 12.2.1.3.0
- 12.2.1.4.0
- ≤ 8.0.29
- 13.2.5
- 12.2.2.0.0
- 12.2.1.3.0
- 12.2.1.4.0
- 14.1.1.0.0
No data.
EAP 6.4 log4j async
log4j
Fixed · RHSA-2022:0437
EAP 6.4.24 release
n/a
Fixed · RHSA-2022:5458
RHEL-8 based Middleware Containers
rh-sso-7/sso7-rhel8-operator-bundle:7.5.1-9
Fixed · RHSA-2022:0450
RHEL-8 based Middleware Containers
rh-sso-7/sso74-openj9-openshift-rhel8:7.4-60
Fixed · RHSA-2022:0445
RHEL-8 based Middleware Containers
rh-sso-7/sso74-openshift-rhel8:7.4-45
Fixed · RHSA-2022:0444
RHEL-8 based Middleware Containers
rh-sso-7/sso75-openshift-rhel8:7.5-17
Fixed · RHSA-2022:0450
RHSSO 7.5.1
log4j
Fixed · RHSA-2022:0449
Red Hat AMQ Streams 1.6.7
n/a
Fixed · RHSA-2022:0467
Red Hat AMQ Streams 2.0.1
log4j
Fixed · RHSA-2022:0469
Red Hat Data Grid 7.3.9
log4j
Fixed · RHSA-2022:0430
Red Hat Enterprise Linux 6 Extended Lifecycle Support
log4j-0:1.2.14-6.6.el6_10
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.3 Advanced Update Support
log4j-0:1.2.17-17.el7_3
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.4 Advanced Update Support
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.6 Advanced Update Support
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.6 Telco Extended Update Support
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.7 Advanced Update Support
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.7 Telco Extended Update Support
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions
log4j-0:1.2.17-18.el7_4
Fixed · RHSA-2022:0442
Red Hat Enterprise Linux 8
parfait:0.5-8050020220124063900.6b489b78
Fixed · RHSA-2022:0290
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
parfait:0.5-8010020220124232535.d5701770
Fixed · RHSA-2022:0294
Red Hat Enterprise Linux 8.2 Extended Update Support
parfait:0.5-8020020220124231008.1c5d4e8a
Fixed · RHSA-2022:0291
Red Hat Enterprise Linux 8.4 Extended Update Support
parfait:0.5-8040020220124230039.d304d9ed
Fixed · RHSA-2022:0289
Red Hat Fuse 7.10.1
log4j
Fixed · RHSA-2022:0661
Red Hat Fuse/AMQ 6.3.20
log4j
Fixed · RHSA-2022:0553
Red Hat Fuse/AMQ 6.3.20
log4j
Fixed · RHSA-2022:0553
Red Hat JBoss Data Virtualization 6.4.8.SP1
log4j
Fixed · RHSA-2022:0497
Red Hat JBoss Data Virtualization 6.4.8.SP2
log4j
Fixed · RHSA-2022:0507
Red Hat JBoss Enterprise Application Platform
org.jboss.logmanager/log4j-jboss-logmanager:1.2.2.Final-redhat-00002
Fixed · RHSA-2022:0435
Red Hat JBoss Enterprise Application Platform
org.jboss.logmanager/log4j-jboss-logmanager:1.2.2.Final-redhat-00002
Fixed · RHSA-2022:1299
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el6
Fixed · RHSA-2022:5459
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el6
Fixed · RHSA-2022:0438
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6
log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el6
Fixed · RHSA-2022:0438
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el7
Fixed · RHSA-2022:5460
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7
Fixed · RHSA-2022:0438
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7
log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el7
Fixed · RHSA-2022:0438
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7
Fixed · RHSA-2024:5856
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-apache-cxf-0:3.4.10-1.SP1_redhat_00001.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-avro-0:1.7.6-8.redhat_00003.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-h2database-0:1.4.197-3.redhat_00004.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-jboss-annotations-api_1.3_spec-0:2.0.1-4.Final_redhat_00001.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-jboss-server-migration-0:1.7.2-12.Final_redhat_00013.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-jboss-xnio-base-0:3.7.13-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-log4j-jboss-logmanager-0:1.2.2-2.Final_redhat_00002.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-wildfly-0:7.3.11-4.GA_redhat_00002.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-wss4j-0:2.3.3-2.redhat_00001.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-xalan-j2-0:2.7.1-38.redhat_00015.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
eap7-xml-security-0:2.2.3-2.redhat_00001.1.el7eap
Fixed · RHSA-2024:10207
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
eap7-log4j-0:2.17.1-1.redhat_00001.1.el8eap
Fixed · RHSA-2022:1297
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el8eap
Fixed · RHSA-2022:0436
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
eap7-log4j-0:2.17.1-1.redhat_00001.1.el7eap
Fixed · RHSA-2022:1296
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el7eap
Fixed · RHSA-2022:0436
Red Hat JBoss Web Server 3 for RHEL 7
log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7
Fixed · RHSA-2022:0524
Red Hat JBoss Web Server 3 for RHEL 7
tomcat-native-0:1.2.23-26.redhat_26.ep7.el7
Fixed · RHSA-2022:0524
Red Hat JBoss Web Server 3 for RHEL 7
tomcat7-0:7.0.70-46.ep7.el7
Fixed · RHSA-2022:0524
Red Hat JBoss Web Server 3 for RHEL 7
tomcat8-0:8.0.36-49.ep7.el7
Fixed · RHSA-2022:0524
Red Hat JBoss Web Server 3.1
log4j-eap6
Fixed · RHSA-2022:0527
Red Hat Single Sign-On 7.4.10
log4j
Fixed · RHSA-2022:0446
Red Hat Single Sign-On 7.5 for RHEL 7
rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el7sso
Fixed · RHSA-2022:0447
Red Hat Single Sign-On 7.5 for RHEL 8
rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el8sso
Fixed · RHSA-2022:0448
Red Hat Software Collections for Red Hat Enterprise Linux 7
rh-maven36-log4j12-0:1.2.17-23.4.el7
Fixed · RHSA-2022:0439
Red Hat Virtualization Engine 4.4
org.ovirt.engine-root-0:4.4.10.6-1
Fixed · RHSA-2022:0475
Red Hat Virtualization Engine 4.4
snmp4j-0:3.6.4-0.1.el8ev
Fixed · RHSA-2022:0475
A-MQ Clients 2
log4j
Affected
Red Hat AMQ Broker 7
log4j
Affected
Red Hat Data Grid 8
log4j
Not affected
Red Hat Decision Manager 7
log4j
Not affected
Red Hat Enterprise Linux 7
tomcat
Not affected
Red Hat Integration Camel K 1
log4j
Not affected
Red Hat Integration Camel Quarkus 1
log4j
Not affected
Red Hat JBoss Enterprise Application Platform Expansion Pack
log4j
Not affected
Red Hat JBoss Fuse Service Works 6
log4j
Out of support scope
Red Hat JBoss Operations Network 3
log4j
Out of support scope
Red Hat OpenShift Application Runtimes
log4j
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-metering-hadoop
Affected
Red Hat OpenShift Container Platform 4
openshift4/ose-metering-hive
Affected
Red Hat OpenShift Container Platform 4
openshift4/ose-metering-presto
Affected
Red Hat OpenStack Platform 13 (Queens)
opendaylight
Out of support scope
Red Hat Process Automation 7
log4j
Not affected
Red Hat Satellite 6
log4j-over-slf4j
Not affected
Red Hat Virtualization 4
ovirt-engine
Not affected
Red Hat Virtualization 4
ovirt-engine-extension-logger-log4j
Not affected
Red Hat Virtualization 4
vdsm-jsonrpc-java
Not affected
Red Hat build of Quarkus
log4j
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| EAP 6.4 log4j async | log4j | Fixed | RHSA-2022:0437 |
| EAP 6.4.24 release | n/a | Fixed | RHSA-2022:5458 |
| RHEL-8 based Middleware Containers | rh-sso-7/sso7-rhel8-operator-bundle:7.5.1-9 | Fixed | RHSA-2022:0450 |
| RHEL-8 based Middleware Containers | rh-sso-7/sso74-openj9-openshift-rhel8:7.4-60 | Fixed | RHSA-2022:0445 |
| RHEL-8 based Middleware Containers | rh-sso-7/sso74-openshift-rhel8:7.4-45 | Fixed | RHSA-2022:0444 |
| RHEL-8 based Middleware Containers | rh-sso-7/sso75-openshift-rhel8:7.5-17 | Fixed | RHSA-2022:0450 |
| RHSSO 7.5.1 | log4j | Fixed | RHSA-2022:0449 |
| Red Hat AMQ Streams 1.6.7 | n/a | Fixed | RHSA-2022:0467 |
| Red Hat AMQ Streams 2.0.1 | log4j | Fixed | RHSA-2022:0469 |
| Red Hat Data Grid 7.3.9 | log4j | Fixed | RHSA-2022:0430 |
| Red Hat Enterprise Linux 6 Extended Lifecycle Support | log4j-0:1.2.14-6.6.el6_10 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7 | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.3 Advanced Update Support | log4j-0:1.2.17-17.el7_3 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.4 Advanced Update Support | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.6 Advanced Update Support | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.6 Telco Extended Update Support | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.7 Advanced Update Support | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.7 Telco Extended Update Support | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions | log4j-0:1.2.17-18.el7_4 | Fixed | RHSA-2022:0442 |
| Red Hat Enterprise Linux 8 | parfait:0.5-8050020220124063900.6b489b78 | Fixed | RHSA-2022:0290 |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions | parfait:0.5-8010020220124232535.d5701770 | Fixed | RHSA-2022:0294 |
| Red Hat Enterprise Linux 8.2 Extended Update Support | parfait:0.5-8020020220124231008.1c5d4e8a | Fixed | RHSA-2022:0291 |
| Red Hat Enterprise Linux 8.4 Extended Update Support | parfait:0.5-8040020220124230039.d304d9ed | Fixed | RHSA-2022:0289 |
| Red Hat Fuse 7.10.1 | log4j | Fixed | RHSA-2022:0661 |
| Red Hat Fuse/AMQ 6.3.20 | log4j | Fixed | RHSA-2022:0553 |
| Red Hat Fuse/AMQ 6.3.20 | log4j | Fixed | RHSA-2022:0553 |
| Red Hat JBoss Data Virtualization 6.4.8.SP1 | log4j | Fixed | RHSA-2022:0497 |
| Red Hat JBoss Data Virtualization 6.4.8.SP2 | log4j | Fixed | RHSA-2022:0507 |
| Red Hat JBoss Enterprise Application Platform | org.jboss.logmanager/log4j-jboss-logmanager:1.2.2.Final-redhat-00002 | Fixed | RHSA-2022:0435 |
| Red Hat JBoss Enterprise Application Platform | org.jboss.logmanager/log4j-jboss-logmanager:1.2.2.Final-redhat-00002 | Fixed | RHSA-2022:1299 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el6 | Fixed | RHSA-2022:5459 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el6 | Fixed | RHSA-2022:0438 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 | log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el6 | Fixed | RHSA-2022:0438 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el7 | Fixed | RHSA-2022:5460 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7 | Fixed | RHSA-2022:0438 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 | log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el7 | Fixed | RHSA-2022:0438 |
| Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7 | Fixed | RHSA-2024:5856 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-apache-cxf-0:3.4.10-1.SP1_redhat_00001.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-avro-0:1.7.6-8.redhat_00003.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-h2database-0:1.4.197-3.redhat_00004.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-jboss-annotations-api_1.3_spec-0:2.0.1-4.Final_redhat_00001.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-jboss-server-migration-0:1.7.2-12.Final_redhat_00013.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-jboss-xnio-base-0:3.7.13-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-log4j-jboss-logmanager-0:1.2.2-2.Final_redhat_00002.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-wildfly-0:7.3.11-4.GA_redhat_00002.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-wss4j-0:2.3.3-2.redhat_00001.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-xalan-j2-0:2.7.1-38.redhat_00015.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | eap7-xml-security-0:2.2.3-2.redhat_00001.1.el7eap | Fixed | RHSA-2024:10207 |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | eap7-log4j-0:2.17.1-1.redhat_00001.1.el8eap | Fixed | RHSA-2022:1297 |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el8eap | Fixed | RHSA-2022:0436 |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | eap7-log4j-0:2.17.1-1.redhat_00001.1.el7eap | Fixed | RHSA-2022:1296 |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el7eap | Fixed | RHSA-2022:0436 |
| Red Hat JBoss Web Server 3 for RHEL 7 | log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7 | Fixed | RHSA-2022:0524 |
| Red Hat JBoss Web Server 3 for RHEL 7 | tomcat-native-0:1.2.23-26.redhat_26.ep7.el7 | Fixed | RHSA-2022:0524 |
| Red Hat JBoss Web Server 3 for RHEL 7 | tomcat7-0:7.0.70-46.ep7.el7 | Fixed | RHSA-2022:0524 |
| Red Hat JBoss Web Server 3 for RHEL 7 | tomcat8-0:8.0.36-49.ep7.el7 | Fixed | RHSA-2022:0524 |
| Red Hat JBoss Web Server 3.1 | log4j-eap6 | Fixed | RHSA-2022:0527 |
| Red Hat Single Sign-On 7.4.10 | log4j | Fixed | RHSA-2022:0446 |
| Red Hat Single Sign-On 7.5 for RHEL 7 | rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el7sso | Fixed | RHSA-2022:0447 |
| Red Hat Single Sign-On 7.5 for RHEL 8 | rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el8sso | Fixed | RHSA-2022:0448 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-maven36-log4j12-0:1.2.17-23.4.el7 | Fixed | RHSA-2022:0439 |
| Red Hat Virtualization Engine 4.4 | org.ovirt.engine-root-0:4.4.10.6-1 | Fixed | RHSA-2022:0475 |
| Red Hat Virtualization Engine 4.4 | snmp4j-0:3.6.4-0.1.el8ev | Fixed | RHSA-2022:0475 |
| A-MQ Clients 2 | log4j | Affected | n/a |
| Red Hat AMQ Broker 7 | log4j | Affected | n/a |
| Red Hat Data Grid 8 | log4j | Not affected | n/a |
| Red Hat Decision Manager 7 | log4j | Not affected | n/a |
| Red Hat Enterprise Linux 7 | tomcat | Not affected | n/a |
| Red Hat Integration Camel K 1 | log4j | Not affected | n/a |
| Red Hat Integration Camel Quarkus 1 | log4j | Not affected | n/a |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | log4j | Not affected | n/a |
| Red Hat JBoss Fuse Service Works 6 | log4j | Out of support scope | n/a |
| Red Hat JBoss Operations Network 3 | log4j | Out of support scope | n/a |
| Red Hat OpenShift Application Runtimes | log4j | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-hadoop | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-hive | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-presto | Affected | n/a |
| Red Hat OpenStack Platform 13 (Queens) | opendaylight | Out of support scope | n/a |
| Red Hat Process Automation 7 | log4j | Not affected | n/a |
| Red Hat Satellite 6 | log4j-over-slf4j | Not affected | n/a |
| Red Hat Virtualization 4 | ovirt-engine | Not affected | n/a |
| Red Hat Virtualization 4 | ovirt-engine-extension-logger-log4j | Not affected | n/a |
| Red Hat Virtualization 4 | vdsm-jsonrpc-java | Not affected | n/a |
| Red Hat build of Quarkus | log4j | Not affected | n/a |
No package ranges for this CVE.
Remediation
Vendor solution
Users should upgrade to Log4j 2 or remove usage of the JDBCAppender from their configurations.
Red Hat statement
Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Red Hat Satellite bundles log4j-over-slf4j with Candlepin, however, product is not affected as it uses logback framework for logging. Red Hat Virtualization and OpenShift Container Platform in the OCP Metering stack (the Hive/Presto/Hadoop components) ship a vulnerable version of the log4j package, however JDBCAppender is not used. Therefore the impact of this vulnerability for these products is rated Low.
Red Hat mitigation
These are the possible mitigations for this flaw for releases version 1.x: - Comment out or remove JDBCAppender in the Log4j configuration if it is used - Remove the JDBCAppender class from the server's jar files. For example: ``` zip -q -d log4j-*.jar org/apache/log4j/jdbc/JDBCAppender.class ```
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1 other source (Red Hat) ▾
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
AV:N/AC:M/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed May 22, 2026 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (38 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 66.54% (0.66537) | 99.27th | v5 (v2026.06.15) |
| Jun 15, 2026 | 67.47% (0.67466) | 99.21th | v5 (v2026.06.15) |
| Apr 26, 2026 | 9.45% (0.09452) | 92.83th | v4 (v2025.03.14) |
| Apr 24, 2026 | 11.56% (0.11560) | 93.67th | v4 (v2025.03.14) |
| Apr 22, 2026 | 9.45% (0.09452) | 92.83th | v4 (v2025.03.14) |
| Mar 4, 2026 | 7.95% (0.07951) | 91.91th | v4 (v2025.03.14) |
| Mar 1, 2026 | 11.31% (0.11312) | 93.43th | v4 (v2025.03.14) |
| Feb 4, 2026 | 7.95% (0.07951) | 91.84th | v4 (v2025.03.14) |
| Feb 1, 2026 | 11.31% (0.11312) | 93.38th | v4 (v2025.03.14) |
| Jan 4, 2026 | 7.95% (0.07951) | 91.78th | v4 (v2025.03.14) |
| Jan 1, 2026 | 11.31% (0.11312) | 93.35th | v4 (v2025.03.14) |
| Dec 4, 2025 | 7.95% (0.07951) | 91.72th | v4 (v2025.03.14) |
| Dec 1, 2025 | 11.31% (0.11312) | 93.29th | v4 (v2025.03.14) |
| Nov 28, 2025 | 7.95% (0.07951) | 91.70th | v4 (v2025.03.14) |
| Nov 22, 2025 | 11.31% (0.11312) | 93.24th | v4 (v2025.03.14) |
| Nov 21, 2025 | 13.33% (0.13333) | 93.89th | v4 (v2025.03.14) |
| Nov 18, 2025 | 72.75% (0.72748) | 98.84th | v4 (v2025.03.14) |
| Jun 27, 2025 | 14.99% (0.14990) | 94.21th | v4 (v2025.03.14) |
| Jun 24, 2025 | 18.03% (0.18030) | 94.83th | v4 (v2025.03.14) |
| May 1, 2025 | 14.99% (0.14990) | 94.20th | v4 (v2025.03.14) |
| Apr 25, 2025 | 12.76% (0.12764) | 93.58th | v4 (v2025.03.14) |
| Mar 30, 2025 | 14.99% (0.14990) | 93.98th | v4 (v2025.03.14) |
| Mar 29, 2025 | 20.87% (0.20866) | 92.86th | v4 (v2025.03.14) |
| Mar 17, 2025 | 15.00% (0.14997) | 94.05th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.36% (0.00358) | 73.01th | v3 (v2023.03.01) |
| May 9, 2024 | 0.44% (0.00436) | 74.64th | v3 (v2023.03.01) |
| Mar 28, 2024 | 0.49% (0.00490) | 75.65th | v3 (v2023.03.01) |
| Feb 1, 2024 | 0.49% (0.00490) | 73.64th | v3 (v2023.03.01) |
| Sep 9, 2023 | 0.44% (0.00443) | 71.75th | v3 (v2023.03.01) |
| Jul 14, 2023 | 0.38% (0.00384) | 69.43th | v3 (v2023.03.01) |
| Jul 1, 2023 | 0.43% (0.00428) | 70.89th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.36% (0.00357) | 67.68th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.74% (0.01742) | 76.22th | v2 (v2022.01.01) |
| Oct 1, 2022 | 1.74% (0.01742) | 75.41th | v2 (v2022.01.01) |
| Jul 26, 2022 | 15.88% (0.15880) | 95.89th | v2 (v2022.01.01) |
| Apr 1, 2022 | 18.20% (0.18200) | 95.96th | v2 (v2022.01.01) |
| Feb 18, 2022 | 18.20% (0.18200) | 93.58th | v2 (v2022.01.01) |
| Feb 8, 2022 | 12.49% (0.12492) | 89.89th | v2 (v2022.01.01) |
References (12)
- http://www.openwall.com/lists/oss-security/2022/01/18/4 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2022-23305 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2041959 Issue Tracking
- https://github.com/advisories/GHSA-65fg-84f6-3jq3 Advisory
- https://lists.apache.org/thread/pt6lh3pbsvxqlwlp4c5l798dv2hkc85y x_refsource_MISCIssue TrackingMailing ListVendor Advisory
- https://logging.apache.org/log4j/1.2/index.html x_refsource_MISCVendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-23305
- https://security.netapp.com/advisory/ntap-20220217-0007 x_refsource_CONFIRMThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-23305
- https://www.openwall.com/lists/oss-security/2022/01/18/4
- https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html x_refsource_MISCPatchThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2022/01/18/4 | mailing-listx_refsource_MLISTMailing ListThird Party Advisory | |
| https://access.redhat.com/security/cve/CVE-2022-23305 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2041959 | Issue Tracking | |
| https://github.com/advisories/GHSA-65fg-84f6-3jq3 | Advisory | |
| https://lists.apache.org/thread/pt6lh3pbsvxqlwlp4c5l798dv2hkc85y | x_refsource_MISCIssue TrackingMailing ListVendor Advisory | |
| https://logging.apache.org/log4j/1.2/index.html | x_refsource_MISCVendor Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2022-23305 | ||
| https://security.netapp.com/advisory/ntap-20220217-0007 | x_refsource_CONFIRMThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2022-23305 | ||
| https://www.openwall.com/lists/oss-security/2022/01/18/4 | ||
| https://www.oracle.com/security-alerts/cpuapr2022.html | x_refsource_MISCPatchThird Party Advisory | |
| https://www.oracle.com/security-alerts/cpujul2022.html | x_refsource_MISCPatchThird Party Advisory |
Change history (0)
No recorded changes yet.