http://www.openwall.com/lists/oss-security/2021/12/19/1

https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf

https://logging.apache.org/log4j/2.x/security.html

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032

https://security.netapp.com/advisory/ntap-20211218-0001/

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd

https://www.debian.org/security/2021/dsa-5024

https://www.kb.cert.org/vuls/id/930724

https://www.oracle.com/security-alerts/cpuapr2022.html

https://www.oracle.com/security-alerts/cpujan2022.html

https://www.oracle.com/security-alerts/cpujul2022.html

https://www.zerodayinitiative.com/advisories/ZDI-21-1541/

OR
     *cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*
     *cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:* versions from (including) 8.3.0.0 up to (including) 8.5.1.0
     *cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_

OR
     *cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_plm_mcad_connector:3.6:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_deposits_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_enter

https://www.oracle.com/security-alerts/cpuapr2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html [No Types Assigned]

https://www.oracle.com/security-alerts/cpuapr2022.html [No Types Assigned]

OR
     *cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*
     *cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:* versions from (including) 8.3.0.0 up to (including) 8.5.1.0
     *cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_

https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html [No Types Assigned]

NIST AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST (AV:N/AC:M/Au:N/C:N/I:N/A:P)

NIST (AV:N/AC:L/Au:N/C:N/I:N/A:P)

OR
     *cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta3-rc1:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta3-rc2:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta4:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0

OR
     *cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* versions from (including) 2.0 up to (excluding) 2.3.1
     *cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* versions from (including) 2.4 up to (excluding) 2.12.3
     *cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* versions from (including) 2.13.0 up to (including) 2.16.0

AND
     OR
          *cpe:2.3:o:sonicwall:6bk1602-0aa12-0tp0_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7.0
     OR
          cpe:2.3:h:sonicwall:6bk1602-0aa12-0tp0:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:sonicwall:6bk1602-0aa22-0tp0_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7.0
     OR
          cpe:2.3:h:sonicwall:6bk1602-0aa22-0tp0:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:sonicwall:6bk1602-0aa32-0tp0_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7.0
     OR
          cpe:2.3:h:sonicwall:6bk1602-0aa32-0tp0:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:sonicwall:6bk1602-0aa42-0tp0_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7.0
     OR
          cpe:2.3:h:sonicwall:6bk1602-0aa42-0tp0:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:sonicwall:6bk1602-0aa52-0tp0_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.7.0
     OR
          cpe:2.3:h:sonicwall:6bk1602-0aa52-0tp0:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* versions up to (including) 10.0.12
     *cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:on-premises:*:*:* versions from (including) 2.0 up to (excluding) 3.0
     *cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:saas:*:*:* versions from (including) 2.0 up to (excluding) 3.0
     *cpe:2.3:a:sonicwall:web_application_firewall:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (excluding) 3.1.0

https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf Third Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 No Types Assigned

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 Third Party Advisory

https://www.kb.cert.org/vuls/id/930724 No Types Assigned

https://www.kb.cert.org/vuls/id/930724 Third Party Advisory, US Government Resource

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0 and 2.12.3.

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.

https://lists.debian.org/debian-lts-announce/2021/12/msg00017.html [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/ [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2021/12/msg00017.html [No Types Assigned]

https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf [No Types Assigned]

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 [No Types Assigned]

https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf [No Types Assigned]

https://www.kb.cert.org/vuls/id/930724 [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST (AV:N/AC:L/Au:N/C:N/I:N/A:P)

NIST CWE-20

NIST CWE-674

OR
     *cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta3-rc1:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta3-rc2:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0:beta4:*:*:*:*:*:*
     *cpe:2.3:a:apache:log4j:2.0

OR
     *cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

http://www.openwall.com/lists/oss-security/2021/12/19/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/12/19/1 Mailing List, Mitigation, Third Party Advisory

https://logging.apache.org/log4j/2.x/security.html No Types Assigned

https://logging.apache.org/log4j/2.x/security.html Release Notes, Vendor Advisory

https://security.netapp.com/advisory/ntap-20211218-0001/ No Types Assigned

https://security.netapp.com/advisory/ntap-20211218-0001/ Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd No Types Assigned

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd Third Party Advisory

https://www.debian.org/security/2021/dsa-5024 No Types Assigned

https://www.debian.org/security/2021/dsa-5024 Third Party Advisory

https://www.zerodayinitiative.com/advisories/ZDI-21-1541/ No Types Assigned

https://www.zerodayinitiative.com/advisories/ZDI-21-1541/ Third Party Advisory, VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd [No Types Assigned]

https://www.zerodayinitiative.com/advisories/ZDI-21-1541/ [No Types Assigned]

https://www.debian.org/security/2021/dsa-5024 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/12/19/1 [No Types Assigned]

https://security.netapp.com/advisory/ntap-20211218-0001/ [No Types Assigned]