Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2017-5645 Details
Description
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| apache log4j | >= 2.0, < 2.8.2 |
CPE
Remediation
| |
| netapp oncommand api services | All versions |
CPE
Remediation
| |
| netapp oncommand insight | All versions |
CPE
Remediation
| |
| netapp oncommand workflow automation | All versions |
CPE
Remediation
| |
| netapp service level manager | All versions |
CPE
Remediation
| |
| netapp snapcenter | All versions |
CPE
Remediation
| |
| netapp storage automation store | All versions |
CPE
Remediation
| |
| redhat fuse | 1.0 |
CPE
Remediation
| |
| redhat enterprise linux | 6.0 6.7 7.0 7.3 7.4 7.5 7.6 |
CPE
Remediation
| |
| redhat enterprise linux desktop | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server aus | 7.4 7.6 |
CPE
Remediation
| |
| redhat enterprise linux server eus | 7.4 7.5 7.6 |
CPE
Remediation
| |
| redhat enterprise linux server tus | 7.4 7.6 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 7.0 |
CPE
Remediation
| |
| oracle api gateway | 11.1.2.4.0 |
CPE
Remediation
| |
| oracle application testing suite | 13.3.0.1 |
CPE
Remediation
| |
| oracle autovue vuelink integration | 21.0.0 21.0.1 |
CPE
Remediation
| |
| oracle banking platform | 2.6.0 2.6.1 2.6.2 |
CPE
Remediation
| |
| oracle bi publisher | 11.1.1.7.0 11.1.1.9.0 12.2.1.3.0 12.2.1.4.0 |
CPE
Remediation
| |
| oracle communications converged application server - service controller | 6.1 |
CPE
Remediation
| |
| oracle communications instant messaging server | 10.0.1.3.0 |
CPE
Remediation
| |
| oracle communications interactive session recorder | >= 6.0, <= 6.2 |
CPE
Remediation
| |
| oracle communications messaging server | < 8.0.2 |
CPE
Remediation
| |
| oracle communications network integrity | >= 7.3.2, <= 7.3.6 |
CPE
Remediation
| |
| oracle communications online mediation controller | 6.1 |
CPE
Remediation
| |
| oracle communications pricing design center | 11.1 12.0 |
CPE
Remediation
| |
| oracle communications service broker | 6.0 |
CPE
Remediation
| |
| oracle communications webrtc session controller | < 7.2 |
CPE
Remediation
| |
| oracle configuration manager | 12.1.2.0.2 12.1.2.0.5 |
CPE
Remediation
| |
| oracle endeca information discovery studio | 3.2.0 |
CPE
Remediation
| |
| oracle enterprise data quality | 12.2.1.3.0 |
CPE
Remediation
| |
| oracle enterprise manager base platform | 12.1.0.5 13.2.0.0 |
CPE
Remediation
| |
| oracle enterprise manager for fusion middleware | 12.1.0.5 13.2.0.0 |
CPE
Remediation
| |
| oracle enterprise manager for mysql database | <= 13.2.2.0.0 |
CPE
Remediation
| |
| oracle enterprise manager for oracle database | 12.1.0.8 13.2.2 |
CPE
Remediation
| |
| oracle enterprise manager for peoplesoft | 13.1.1.1 13.2.1.1 |
CPE
Remediation
| |
| oracle financial services analytical applications infrastructure | >= 7.3.3.0.0, <= 7.3.3.0.2 >= 8.0.0.0.0, <= 8.0.7.0.0 |
CPE
Remediation
| |
| oracle financial services behavior detection platform | >= 8.0.0.0.0, <= 8.0.4.0.0 6.1.1 |
CPE
Remediation
| |
| oracle financial services hedge management and ifrs valuations | 8.0.4 8.0.5 |
CPE
Remediation
| |
| oracle financial services lending and leasing | >= 14.1.0, <= 14.8.0 12.5.0 |
CPE
Remediation
| |
| oracle financial services loan loss forecasting and provisioning | 8.0.4 8.0.5 |
CPE
Remediation
| |
| oracle financial services profitability management | >= 8.0.0.0.0, <= 8.0.7.0.0 6.1.1 |
CPE
Remediation
| |
| oracle financial services regulatory reporting with agilereporter | 8.0.9.2.0 |
CPE
Remediation
| |
| oracle flexcube investor servicing | 12.0.4 12.1.0 12.3.0 12.4.0 14.0.0 |
CPE
Remediation
| |
| oracle fusion middleware mapviewer | 12.2.1.2 12.2.1.3 |
CPE
Remediation
| |
| oracle goldengate | 12.3.2.1.1 |
CPE
Remediation
| |
| oracle goldengate application adapters | 12.3.2.1.1 |
CPE
Remediation
| |
| oracle identity analytics | 11.1.1.5.8 |
CPE
Remediation
| |
| oracle identity management suite | 11.1.2.3.0 12.2.1.3.0 |
CPE
Remediation
| |
| oracle identity manager connector | 9.0 |
CPE
Remediation
| |
| oracle in-memory performance-driven planning | 12.1 12.2 |
CPE
Remediation
| |
| oracle instantis enterprisetrack | >= 17.1, <= 17.3 |
CPE
Remediation
| |
| oracle insurance calculation engine | 10.1.1 10.2.1 |
CPE
Remediation
| |
| oracle insurance policy administration | 10.0 10.1 10.2 11.0 |
CPE
Remediation
| |
| oracle insurance rules palette | 10.0 10.1 10.2 11.0 11.1 |
CPE
Remediation
| |
| oracle jd edwards enterpriseone tools | 4.0.1.0 9.2 |
CPE
Remediation
| |
| oracle jdeveloper | 11.1.1.9.0 12.1.3.0.0 12.2.1.3.0 |
CPE
Remediation
| |
| oracle mysql enterprise monitor | >= 3.4.0.0, <= 3.4.7.4297 >= 4.0.0.0, <= 4.0.4.5235 >= 8.0.0.0.0, <= 8.0.0.8131 |
CPE
Remediation
| |
| oracle peoplesoft enterprise fin install | 9.2 |
CPE
Remediation
| |
| oracle policy automation | 10.4.7 12.1.0 12.1.1 12.2.0 12.2.1 12.2.2 12.2.3 12.2.4 12.2.5 12.2.6 12.2.7 12.2.8 12.2.9 12.2.10 |
CPE
Remediation
| |
| oracle policy automation connector for siebel | 10.4.6 |
CPE
Remediation
| |
| oracle policy automation for mobile devices | 10.4.7 12.1.0 12.1.1 12.2.0 12.2.1 12.2.2 12.2.3 12.2.4 12.2.5 12.2.6 12.2.7 12.2.8 12.2.9 12.2.10 |
CPE
Remediation
| |
| oracle primavera gateway | >= 16.2.0, <= 16.2.11 >= 17.12.0, <= 17.12.7 |
CPE
Remediation
| |
| oracle rapid planning | 12.1 12.2 |
CPE
Remediation
| |
| oracle retail advanced inventory planning | 14.0 15.0 |
CPE
Remediation
| |
| oracle retail clearance optimization engine | 14.0.5 |
CPE
Remediation
| |
| oracle retail extract transform and load | 13.0 13.1 13.2 19.0 |
CPE
Remediation
| |
| oracle retail integration bus | 14.0.0 14.1.0 15.0 16.0 |
CPE
Remediation
| |
| oracle retail open commerce platform | 5.3.0 6.0.0 6.0.1 |
CPE
Remediation
| |
| oracle retail predictive application server | 15.0.3 |
CPE
Remediation
| |
| oracle retail service backbone | 14.1 15.0 16.0 |
CPE
Remediation
| |
| oracle siebel ui framework | 18.7 18.8 18.9 |
CPE
Remediation
| |
| oracle soa suite | 12.1.3.0.0 12.2.1.3.0 12.2.2.0.0 |
CPE
Remediation
| |
| oracle tape library acsls | 8.4 |
CPE
Remediation
| |
| oracle timesten in-memory database | 11.2.2.8.49 |
CPE
Remediation
| |
| oracle utilities advanced spatial and operational analytics | 2.7.0.1 |
CPE
Remediation
| |
| oracle utilities work and asset management | 1.9.1.2.12 |
CPE
Remediation
| |
| oracle weblogic server | 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 |
CPE
Remediation
| |
Change History
67 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 13, 2026 | CVE Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Apr 4, 2022 | Reanalysis | [email protected] |
| Mar 31, 2022 | Modified Analysis | [email protected] |
| Feb 7, 2022 | CVE Modified | [email protected] |
| Oct 20, 2021 | CVE Modified | [email protected] |
| Jul 1, 2021 | CVE Modified | [email protected] |
| Jul 1, 2021 | CVE Modified | [email protected] |
| Jul 1, 2021 | CVE Modified | [email protected] |
| Jun 14, 2021 | CVE Modified | [email protected] |
| May 28, 2021 | CVE Modified | [email protected] |
| Apr 2, 2021 | CVE Modified | [email protected] |
| Jan 20, 2021 | CVE Modified | [email protected] |
| Oct 20, 2020 | CVE Modified | [email protected] |
| Aug 31, 2020 | CVE Modified | [email protected] |
| Jul 30, 2020 | CVE Modified | [email protected] |
| Jul 29, 2020 | CVE Modified | [email protected] |
| Jul 15, 2020 | CVE Modified | [email protected] |
| Apr 25, 2020 | CVE Modified | [email protected] |
| Apr 15, 2020 | CVE Modified | [email protected] |
| Feb 28, 2020 | CVE Modified | [email protected] |
| Feb 28, 2020 | CVE Modified | [email protected] |
| Feb 9, 2020 | CVE Modified | [email protected] |
| Jan 27, 2020 | CVE Modified | [email protected] |
| Jan 23, 2020 | CVE Modified | [email protected] |
| Jan 22, 2020 | CVE Modified | [email protected] |
| Jan 15, 2020 | CVE Modified | [email protected] |
| Jan 15, 2020 | CVE Modified | [email protected] |
| Jan 14, 2020 | CVE Modified | [email protected] |
| Jan 11, 2020 | CVE Modified | [email protected] |
| Jan 11, 2020 | CVE Modified | [email protected] |
| Jan 10, 2020 | CVE Modified | [email protected] |
| Jan 8, 2020 | CVE Modified | [email protected] |
| Jan 8, 2020 | CVE Modified | [email protected] |
| Jan 6, 2020 | CVE Modified | [email protected] |
| Dec 30, 2019 | CVE Modified | [email protected] |
| Dec 26, 2019 | CVE Modified | [email protected] |
| Dec 26, 2019 | CVE Modified | [email protected] |
| Dec 26, 2019 | CVE Modified | [email protected] |
| Dec 19, 2019 | CVE Modified | [email protected] |
| Dec 19, 2019 | CVE Modified | [email protected] |
| Dec 19, 2019 | CVE Modified | [email protected] |
| Dec 16, 2019 | CVE Modified | [email protected] |
| Nov 16, 2019 | CVE Modified | [email protected] |
| Oct 16, 2019 | CVE Modified | [email protected] |
| Jul 23, 2019 | CVE Modified | [email protected] |
| Jun 19, 2019 | CVE Modified | [email protected] |
| Apr 25, 2019 | Modified Analysis | [email protected] |
| Apr 23, 2019 | CVE Modified | [email protected] |
| Jan 16, 2019 | CVE Modified | [email protected] |
| Nov 8, 2018 | CVE Modified | [email protected] |
| Oct 17, 2018 | CVE Modified | [email protected] |
| Jul 28, 2018 | CVE Modified | [email protected] |
| Jul 19, 2018 | CVE Modified | [email protected] |
| Apr 20, 2018 | CVE Modified | [email protected] |
| Jan 18, 2018 | CVE Modified | [email protected] |
| Jan 18, 2018 | CVE Modified | [email protected] |
| Jan 5, 2018 | CVE Modified | [email protected] |
| Dec 31, 2017 | CVE Modified | [email protected] |
| Dec 9, 2017 | CVE Modified | [email protected] |
| Dec 8, 2017 | CVE Modified | [email protected] |
| Dec 2, 2017 | CVE Modified | [email protected] |
| Apr 25, 2017 | Initial Analysis | [email protected] |
| Apr 19, 2017 | CVE Modified | [email protected] |