{"cve_id":"CVE-2021-44228","published":"2021-12-10T10:15:09.143000+00:00","last_modified":"2026-08-11T19:33:44.513000+00:00","vuln_status":"Analyzed","description":"Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","base_score":10.0,"base_severity":"CRITICAL","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"CHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-20","CWE-400","CWE-502","CWE-917"],"in_kev":true,"kev_date_added":"2021-12-10","kev_ransomware":true,"epss_score":0.99999,"epss_percentile":1.0,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"PRIV","caps":["CODE_EXEC","DOS","PRIV_GAIN"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T09:53:54.929472+00:00","first_seen":"2021-12-10T10:15:09.143000+00:00","kev_first_seen":"2021-12-10T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["apache","apple","bentley","cisco","debian","fedoraproject","intel","netapp","percussion","siemens","snowsoftware","sonicwall"],"products":["6bk1602-0aa12-0tp0","6bk1602-0aa12-0tp0_firmware","6bk1602-0aa22-0tp0","6bk1602-0aa22-0tp0_firmware","6bk1602-0aa32-0tp0","6bk1602-0aa32-0tp0_firmware","6bk1602-0aa42-0tp0","6bk1602-0aa42-0tp0_firmware","6bk1602-0aa52-0tp0","6bk1602-0aa52-0tp0_firmware","active_iq_unified_manager","advanced_malware_protection_virtual_private_cloud_appliance","automated_subsea_tuning","broadworks","brocade_san_navigator","business_process_automation","capital","cloud_connect","cloud_insights","cloud_manager","cloud_secure_agent","cloudcenter","cloudcenter_cost_optimizer","cloudcenter_suite","cloudcenter_suite_admin","cloudcenter_workload_manager","common_services_platform_collector","comos","computer_vision_annotation_tool","connected_mobile_experiences","contact_center_domain_manager","contact_center_management_portal","crosswork_data_gateway","crosswork_network_automation","crosswork_network_controller","crosswork_optimization_engine","crosswork_platform_infrastructure","crosswork_zero_touch_provisioning","customer_experience_cloud_agent","cx_cloud_agent","cyber_vision","cyber_vision_sensor_management_extension","data_center_network_manager","datacenter_manager","debian_linux","desigo_cc_advanced_reports","desigo_cc_info_center","dna_center","dna_spaces","dna_spaces\\","dna_spaces_connector","e-car_operation_center","email_security","emergency_responder","energy_engage","energyip","energyip_prepay","enterprise_chat_and_email","evolved_programmable_network_manager","fedora","finesse","firepower_1010","firepower_1120","firepower_1140","firepower_1150","firepower_2110","firepower_2120","firepower_2130","firepower_2140","firepower_4110","firepower_4112","firepower_4115","firepower_4120","firepower_4125","firepower_4140","firepower_4145","firepower_4150","firepower_9300","fog_director","fxos","genomics_kernel_library","gma-manager","head-end_system_universal_device_integration_system","identity_services_engine","industrial_edge_management","industrial_edge_management_hub","integrated_management_controller_supervisor","intersight_virtual_appliance","iot_operations_dashboard","log4j","logo\\!_soft_comfort","mendix","mindsphere","mobility_services_engine","navigator","network_assurance_engine","network_dashboard_fabric_controller","network_insights_for_data_center","network_services_orchestrator","nexus_dashboard","nexus_insights","nx","oncommand_insight","oneapi_sample_browser","ontap_tools","opcenter_intelligence","operation_scheduler","optical_network_controller","packaged_contact_center_enterprise","paging_server","prime_service_catalog","rhythmyx","sd-wan_vmanage","secure_device_onboard","secure_firewall_threat_defense","sentron_powermanager","siguard_dsa","sipass_integrated","siveillance_command","siveillance_control_pro","siveillance_identity","siveillance_vantage","siveillance_viewpoint","smart_phy","snapcenter","snow_commander","solid_edge_cam_pro","solid_edge_harness_design","solidfire_\\&_hci_storage_node","solidfire_enterprise_sds","spectrum_power_4","spectrum_power_7","sppa-t3000_ses3000","sppa-t3000_ses3000_firmware","synchro","synchro_4d","system_studio","teamcenter","ucs_central","ucs_central_software","ucs_director","unified_communications_manager","unified_communications_manager_im_\\&_presence_service","unified_communications_manager_im_and_presence_service","unified_computing_system","unified_contact_center_enterprise","unified_contact_center_express","unified_contact_center_management_portal","unified_customer_voice_portal","unified_intelligence_center","unified_sip_proxy","unified_workforce_optimization","unity_connection","vesys","video_surveillance_manager","video_surveillance_operations_manager","virtual_topology_system","virtualized_infrastructure_manager","virtualized_voice_browser","vm_access_proxy","wan_automation_engine","webex_meetings_server","workload_optimization_manager","xcode","xpedition_enterprise","xpedition_package_integrator"],"affected":[{"vendor":"apache","product":"log4j","ranges":["≥ 2.0.1 and < 2.3.1","2.0","≥ 2.13.0 and < 2.15.0","≥ 2.4.0 and < 2.12.2"]},{"vendor":"apple","product":"xcode","ranges":["< 13.3"]},{"vendor":"bentley","product":"synchro","ranges":["≥ 6.1 and < 6.2.4.2"]},{"vendor":"bentley","product":"synchro_4d","ranges":["< 6.4.3.2"]},{"vendor":"cisco","product":"advanced_malware_protection_virtual_private_cloud_appliance","ranges":["< 3.5.4"]},{"vendor":"cisco","product":"automated_subsea_tuning","ranges":["02.01.00","< 2.1.0"]},{"vendor":"cisco","product":"broadworks","ranges":["all versions","< 2021.11_1.162"]},{"vendor":"cisco","product":"business_process_automation","ranges":["≥ 3.2.000.000 and < 3.2.000.009","≥ 3.1.000.000 and < 3.1.000.044","< 3.0.000.115"]},{"vendor":"cisco","product":"cloud_connect","ranges":["< 12.6\\(1\\)"]},{"vendor":"cisco","product":"cloudcenter","ranges":["< 4.10.0.16"]},{"vendor":"cisco","product":"cloudcenter_cost_optimizer","ranges":["< 5.5.2"]},{"vendor":"cisco","product":"cloudcenter_suite","ranges":["5.3.0","5.4.1","4.10.0.15","5.5.1","5.5.0"]},{"vendor":"cisco","product":"cloudcenter_suite_admin","ranges":["< 5.3.1"]},{"vendor":"cisco","product":"cloudcenter_workload_manager","ranges":["< 5.5.2"]},{"vendor":"cisco","product":"common_services_platform_collector","ranges":["002.009\\(001.001\\)","< 2.9.1.3","≥ 2.10.0 and < 2.10.0.1","002.009\\(000.000\\)","002.009\\(000.001\\)","002.009\\(000.002\\)","002.009\\(001.000\\)","002.009\\(001.002\\)","002.010\\(000.000\\)"]},{"vendor":"cisco","product":"connected_mobile_experiences","ranges":["all versions"]},{"vendor":"cisco","product":"contact_center_domain_manager","ranges":["< 12.5\\(1\\)"]},{"vendor":"cisco","product":"contact_center_management_portal","ranges":["< 12.5\\(1\\)"]},{"vendor":"cisco","product":"crosswork_data_gateway","ranges":["3.0.0","< 2.0.2"]},{"vendor":"cisco","product":"crosswork_network_automation","ranges":["4.1.1","3.0.0","2.0.0","4.1.0","all versions"]},{"vendor":"cisco","product":"crosswork_network_controller","ranges":["< 2.0.1","3.0.0"]},{"vendor":"cisco","product":"crosswork_optimization_engine","ranges":["3.0.0","< 2.0.1"]},{"vendor":"cisco","product":"crosswork_platform_infrastructure","ranges":["4.1.0","< 4.0.1"]},{"vendor":"cisco","product":"crosswork_zero_touch_provisioning","ranges":["3.0.0","< 2.0.1"]},{"vendor":"cisco","product":"customer_experience_cloud_agent","ranges":["< 1.12.1"]},{"vendor":"cisco","product":"cx_cloud_agent","ranges":["001.012"]},{"vendor":"cisco","product":"cyber_vision","ranges":["4.0.2"]},{"vendor":"cisco","product":"cyber_vision_sensor_management_extension","ranges":["4.0.2","< 4.0.3"]},{"vendor":"cisco","product":"data_center_network_manager","ranges":["< 11.3\\(1\\)","11.3\\(1\\)"]},{"vendor":"cisco","product":"dna_center","ranges":["< 2.1.2.8","≥ 2.2.3.0 and < 2.2.3.4","2.2.2.8","≥ 2.2.2.0 and < 2.2.2.8"]},{"vendor":"cisco","product":"dna_spaces","ranges":["all versions"]},{"vendor":"cisco","product":"dna_spaces\\","ranges":["< 2.5"]},{"vendor":"cisco","product":"dna_spaces_connector","ranges":["all versions"]},{"vendor":"cisco","product":"emergency_responder","ranges":["11.5\\(4.66000.14\\)","11.5","< 11.5\\(4\\)","11.5\\(4.65000.14\\)"]},{"vendor":"cisco","product":"enterprise_chat_and_email","ranges":["12.0\\(1\\)","12.6\\(1\\)","< 12.0\\(1\\)","12.5\\(1\\)"]},{"vendor":"cisco","product":"evolved_programmable_network_manager","ranges":["5.1","3.0","3.1","4.0","4.1","5.0","≤ 4.1.1"]},{"vendor":"cisco","product":"finesse","ranges":["12.5\\(1\\)","< 12.6\\(1\\)","12.6\\(1\\)"]},{"vendor":"cisco","product":"fog_director","ranges":["all versions"]},{"vendor":"cisco","product":"fxos","ranges":["6.4.0","6.5.0","6.6.0","6.7.0","7.0.0","7.1.0","6.2.3","6.3.0"]},{"vendor":"cisco","product":"identity_services_engine","ranges":["003.002\\(000.116\\)","002.004\\(000.914\\)","002.006\\(000.156\\)","002.007\\(000.356\\)","003.000\\(000.458\\)","003.001\\(000.518\\)","< 2.4.0","2.4.0"]},{"vendor":"cisco","product":"integrated_management_controller_supervisor","ranges":["< 2.3.2.1","2.3.2.0","002.003\\(002.000\\)"]},{"vendor":"cisco","product":"intersight_virtual_appliance","ranges":["1.0.9-343","< 1.0.9-361"]},{"vendor":"cisco","product":"iot_operations_dashboard","ranges":["all versions"]},{"vendor":"cisco","product":"mobility_services_engine","ranges":["all versions"]},{"vendor":"cisco","product":"network_assurance_engine","ranges":["6.0\\(2.1912\\)","< 6.0.2"]},{"vendor":"cisco","product":"network_dashboard_fabric_controller","ranges":["11.5\\(2\\)","11.5\\(3\\)","11.2\\(1\\)","11.3\\(1\\)","11.4\\(1\\)","11.5\\(1\\)","11.0\\(1\\)","11.1\\(1\\)"]},{"vendor":"cisco","product":"network_insights_for_data_center","ranges":["6.0\\(2.1914\\)"]},{"vendor":"cisco","product":"network_services_orchestrator","ranges":["all versions","< 5.3.5.1","≥ 5.6 and < 5.6.3.1","≥ 5.5 and < 5.5.4.1","≥ 5.4 and < 5.4.5.2"]},{"vendor":"cisco","product":"nexus_dashboard","ranges":["< 2.1.2"]},{"vendor":"cisco","product":"nexus_insights","ranges":["< 6.0.2"]},{"vendor":"cisco","product":"optical_network_controller","ranges":["1.1","< 1.1.0"]},{"vendor":"cisco","product":"packaged_contact_center_enterprise","ranges":["11.6\\(1\\)","< 11.6"]},{"vendor":"cisco","product":"paging_server","ranges":["9.0\\(1\\)","8.5\\(1\\)","14.0\\(1\\)","8.3\\(1\\)","8.4\\(1\\)","9.0\\(2\\)","< 14.4.1","12.5\\(2\\)","9.1\\(1\\)"]},{"vendor":"cisco","product":"prime_service_catalog","ranges":["< 12.1","12.1"]},{"vendor":"cisco","product":"sd-wan_vmanage","ranges":["≥ 20.5 and < 20.5.1.1","< 20.3.4.1","≥ 20.4 and < 20.4.2.1","≥ 20.6 and < 20.6.2.1","20.3","20.4","20.5","20.6","20.6.1","20.7","20.8"]},{"vendor":"cisco","product":"secure_firewall_threat_defense","ranges":["6.3.0","6.4.0","6.5.0","6.6.0","6.7.0","7.0.0","6.2.3","7.1.0"]},{"vendor":"cisco","product":"smart_phy","ranges":["3.1.2","3.1.4","3.1.5","3.2.1","21.3","< 3.2.1","3.1.3"]},{"vendor":"cisco","product":"ucs_central","ranges":["< 2.0\\(1p\\)"]},{"vendor":"cisco","product":"ucs_central_software","ranges":["2.0\\(1a\\)","2.0\\(1c\\)","2.0\\(1k\\)","2.0\\(1d\\)","2.0\\(1e\\)","2.0\\(1f\\)","2.0\\(1g\\)","2.0","2.0\\(1b\\)","2.0\\(1h\\)","2.0\\(1l\\)"]},{"vendor":"cisco","product":"ucs_director","ranges":["< 6.8.2.0"]},{"vendor":"cisco","product":"unified_communications_manager","ranges":["11.5\\(1\\)","< 11.5\\(1\\)","11.5\\(1\\)su3","11.5\\(1.22900.28\\)","11.5\\(1.21900.40\\)","11.5\\(1.18900.97\\)","11.5\\(1.18119.2\\)","11.5\\(1.17900.52\\)"]},{"vendor":"cisco","product":"unified_communications_manager_im_\\&_presence_service","ranges":["11.5\\(1\\)","11.5\\(1.22900.6\\)"]},{"vendor":"cisco","product":"unified_communications_manager_im_and_presence_service","ranges":["< 11.5\\(1\\)","11.5\\(1\\)"]},{"vendor":"cisco","product":"unified_computing_system","ranges":["006.008\\(001.000\\)"]},{"vendor":"cisco","product":"unified_contact_center_enterprise","ranges":["11.6\\(2\\)","12.6\\(1\\)","12.6\\(2\\)","12.0\\(1\\)","12.5\\(1\\)","< 11.6\\(2\\)"]},{"vendor":"cisco","product":"unified_contact_center_express","ranges":["12.5\\(1\\)","< 12.5\\(1\\)","12.6\\(1\\)","12.6\\(2\\)"]},{"vendor":"cisco","product":"unified_contact_center_management_portal","ranges":["12.6\\(1\\)"]},{"vendor":"cisco","product":"unified_customer_voice_portal","ranges":["< 11.6","11.6\\(1\\)","12.0\\(1\\)","12.5\\(1\\)","12.6\\(1\\)","12.5","12.0","11.6"]},{"vendor":"cisco","product":"unified_intelligence_center","ranges":["12.6\\(1\\)","12.6\\(2\\)","< 12.6\\(1\\)"]},{"vendor":"cisco","product":"unified_sip_proxy","ranges":["010.000\\(001\\)","010.002\\(000\\)","010.000\\(000\\)","010.002\\(001\\)","< 10.2.1v2"]},{"vendor":"cisco","product":"unified_workforce_optimization","ranges":["11.5\\(1\\)","< 11.5\\(1\\)"]},{"vendor":"cisco","product":"unity_connection","ranges":["< 11.5\\(1\\)","11.5","11.5\\(1.10000.6\\)"]},{"vendor":"cisco","product":"video_surveillance_manager","ranges":["7.14\\(1.26\\)","7.14\\(2.26\\)","7.14\\(4.018\\)","7.14\\(3.025\\)"]},{"vendor":"cisco","product":"video_surveillance_operations_manager","ranges":["< 7.14.4"]},{"vendor":"cisco","product":"virtual_topology_system","ranges":["< 2.6.7","2.6.6"]},{"vendor":"cisco","product":"virtualized_infrastructure_manager","ranges":["< 3.2.0","≥ 3.4.0 and < 3.4.4"]},{"vendor":"cisco","product":"virtualized_voice_browser","ranges":["< 12.5\\(1\\)"]},{"vendor":"cisco","product":"wan_automation_engine","ranges":["7.5","< 7.3.0.2","7.1.3","7.2.1","7.2.2","7.2.3","7.3","7.6","7.4"]},{"vendor":"cisco","product":"webex_meetings_server","ranges":["3.0","4.0","< 3.0"]},{"vendor":"cisco","product":"workload_optimization_manager","ranges":["< 3.2.1"]},{"vendor":"debian","product":"debian_linux","ranges":["10.0","9.0","11.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["35","34"]},{"vendor":"intel","product":"computer_vision_annotation_tool","ranges":["all versions"]},{"vendor":"intel","product":"datacenter_manager","ranges":["< 5.1"]},{"vendor":"intel","product":"genomics_kernel_library","ranges":["all versions"]},{"vendor":"intel","product":"oneapi_sample_browser","ranges":["all versions"]},{"vendor":"intel","product":"secure_device_onboard","ranges":["all versions"]},{"vendor":"intel","product":"system_studio","ranges":["all versions"]},{"vendor":"netapp","product":"active_iq_unified_manager","ranges":["all versions"]},{"vendor":"netapp","product":"brocade_san_navigator","ranges":["all versions"]},{"vendor":"netapp","product":"cloud_insights","ranges":["all versions"]},{"vendor":"netapp","product":"cloud_manager","ranges":["all versions"]},{"vendor":"netapp","product":"cloud_secure_agent","ranges":["all versions"]},{"vendor":"netapp","product":"oncommand_insight","ranges":["all versions"]},{"vendor":"netapp","product":"ontap_tools","ranges":["all versions"]},{"vendor":"netapp","product":"snapcenter","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire_\\&_hci_storage_node","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire_enterprise_sds","ranges":["all versions"]},{"vendor":"percussion","product":"rhythmyx","ranges":["≤ 7.3.2"]},{"vendor":"siemens","product":"6bk1602-0aa12-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"siemens","product":"6bk1602-0aa22-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"siemens","product":"6bk1602-0aa32-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"siemens","product":"6bk1602-0aa42-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"siemens","product":"6bk1602-0aa52-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"siemens","product":"capital","ranges":["< 2019.1","2019.1"]},{"vendor":"siemens","product":"comos","ranges":["< 10.4.2"]},{"vendor":"siemens","product":"desigo_cc_advanced_reports","ranges":["5.1","3.0","4.0","4.1","4.2","5.0"]},{"vendor":"siemens","product":"desigo_cc_info_center","ranges":["5.0","5.1"]},{"vendor":"siemens","product":"e-car_operation_center","ranges":["< 2021-12-13"]},{"vendor":"siemens","product":"energy_engage","ranges":["3.1"]},{"vendor":"siemens","product":"energyip","ranges":["9.0","8.5","8.6","8.7"]},{"vendor":"siemens","product":"energyip_prepay","ranges":["< 3.8.0.12"]},{"vendor":"siemens","product":"gma-manager","ranges":["< 8.6.2j-398"]},{"vendor":"siemens","product":"head-end_system_universal_device_integration_system","ranges":["all versions"]},{"vendor":"siemens","product":"industrial_edge_management","ranges":["all versions"]},{"vendor":"siemens","product":"industrial_edge_management_hub","ranges":["< 2021-12-13"]},{"vendor":"siemens","product":"logo\\!_soft_comfort","ranges":["all versions"]},{"vendor":"siemens","product":"mendix","ranges":["all versions"]},{"vendor":"siemens","product":"mindsphere","ranges":["< 2021-12-16"]},{"vendor":"siemens","product":"navigator","ranges":["< 2021-12-13"]},{"vendor":"siemens","product":"nx","ranges":["all versions"]},{"vendor":"siemens","product":"opcenter_intelligence","ranges":["≥ 3.2 and < 3.5"]},{"vendor":"siemens","product":"operation_scheduler","ranges":["≤ 1.1.3"]},{"vendor":"siemens","product":"sentron_powermanager","ranges":["4.1","4.2"]},{"vendor":"siemens","product":"siguard_dsa","ranges":["≥ 4.2 and < 4.4.1"]},{"vendor":"siemens","product":"sipass_integrated","ranges":["2.85","2.80"]},{"vendor":"siemens","product":"siveillance_command","ranges":["≤ 4.16.2.1"]},{"vendor":"siemens","product":"siveillance_control_pro","ranges":["all versions"]},{"vendor":"siemens","product":"siveillance_identity","ranges":["1.5","1.6"]},{"vendor":"siemens","product":"siveillance_vantage","ranges":["all versions"]},{"vendor":"siemens","product":"siveillance_viewpoint","ranges":["all versions"]},{"vendor":"siemens","product":"solid_edge_cam_pro","ranges":["all versions"]},{"vendor":"siemens","product":"solid_edge_harness_design","ranges":["< 2020","2020"]},{"vendor":"siemens","product":"spectrum_power_4","ranges":["< 4.70","4.70"]},{"vendor":"siemens","product":"spectrum_power_7","ranges":["< 2.30","2.30"]},{"vendor":"siemens","product":"sppa-t3000_ses3000_firmware","ranges":["all versions"]},{"vendor":"siemens","product":"teamcenter","ranges":["all versions"]},{"vendor":"siemens","product":"vesys","ranges":["2020.1","< 2019.1","2019.1","2021.1"]},{"vendor":"siemens","product":"xpedition_enterprise","ranges":["all versions"]},{"vendor":"siemens","product":"xpedition_package_integrator","ranges":["all versions"]},{"vendor":"snowsoftware","product":"snow_commander","ranges":["< 8.10.0"]},{"vendor":"snowsoftware","product":"vm_access_proxy","ranges":["< 3.6"]},{"vendor":"sonicwall","product":"email_security","ranges":["< 10.0.13"]}]}