{"cve_id":"CVE-2021-45105","published":"2021-12-18T12:15:07.433000+00:00","last_modified":"2026-08-25T16:28:27.310000+00:00","vuln_status":"Modified","description":"Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","base_score":5.9,"base_severity":"MEDIUM","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"NONE","impact_i":"NONE","impact_a":"HIGH","cwe_ids":["CWE-20","CWE-674"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.99999,"epss_percentile":0.9999,"cap_rule_version":"0.1.1","stage":"IMPACT","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["DOS"],"terminal":true,"cap_confidence":"high","ingested_at":"2026-09-18T09:53:54.929472+00:00","first_seen":"2021-12-18T12:15:07.433000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["apache","debian","netapp","oracle","sonicwall"],"products":["6bk1602-0aa12-0tp0","6bk1602-0aa12-0tp0_firmware","6bk1602-0aa22-0tp0","6bk1602-0aa22-0tp0_firmware","6bk1602-0aa32-0tp0","6bk1602-0aa32-0tp0_firmware","6bk1602-0aa42-0tp0","6bk1602-0aa42-0tp0_firmware","6bk1602-0aa52-0tp0","6bk1602-0aa52-0tp0_firmware","agile_engineering_data_management","agile_plm_mcad_connector","agile_product_lifecycle_management","autovue_for_agile_product_lifecycle_management","banking_deposits_and_lines_of_credit_servicing","banking_enterprise_default_management","banking_loans_servicing","banking_party_management","banking_payments","banking_platform","banking_trade_finance","banking_treasury_management","business_intelligence","cloud_manager","communications_asap","communications_billing_and_revenue_management","communications_cloud_native_core_console","communications_cloud_native_core_network_function_cloud_native_environment","communications_cloud_native_core_network_repository_function","communications_cloud_native_core_network_slice_selection_function","communications_cloud_native_core_policy","communications_cloud_native_core_security_edge_protection_proxy","communications_cloud_native_core_service_communication_proxy","communications_cloud_native_core_unified_data_repository","communications_convergence","communications_convergent_charging_controller","communications_diameter_signaling_router","communications_eagle_element_management_system","communications_eagle_ftp_table_base_retrieval","communications_element_manager","communications_evolved_communications_application_server","communications_interactive_session_recorder","communications_ip_service_activator","communications_messaging_server","communications_network_charging_and_control","communications_network_integrity","communications_performance_intelligence_center","communications_pricing_design_center","communications_service_broker","communications_services_gatekeeper","communications_session_report_manager","communications_session_route_manager","communications_unified_inventory_management","communications_user_data_repository","communications_webrtc_session_controller","data_integrator","debian_linux","e-business_suite","email_security","enterprise_manager_base_platform","enterprise_manager_for_peoplesoft","enterprise_manager_ops_center","financial_services_analytical_applications_infrastructure","financial_services_model_management_and_governance","flexcube_universal_banking","health_sciences_empirica_signal","health_sciences_inform","health_sciences_information_manager","healthcare_data_repository","healthcare_foundation","healthcare_master_person_index","healthcare_translational_research","hospitality_suite8","hospitality_token_proxy_service","hyperion_bi\\+","hyperion_data_relationship_management","hyperion_infrastructure_technology","hyperion_planning","hyperion_profitability_and_cost_management","hyperion_tax_provision","identity_management_suite","identity_manager_connector","instantis_enterprisetrack","insurance_data_gateway","insurance_insbridge_rating_and_underwriting","jdeveloper","log4j","managed_file_transfer","management_cloud_engine","mysql_enterprise_monitor","network_security_manager","payment_interface","peoplesoft_enterprise_peopletools","primavera_gateway","primavera_p6_enterprise_project_portfolio_management","primavera_unifier","retail_back_office","retail_central_office","retail_customer_insights","retail_data_extractor_for_merchandising","retail_eftlink","retail_financial_integration","retail_integration_bus","retail_invoice_matching","retail_merchandising_system","retail_order_broker","retail_order_management_system","retail_point-of-service","retail_predictive_application_server","retail_price_management","retail_returns_management","retail_service_backbone","retail_store_inventory_management","siebel_ui_framework","sql_developer","taleo_platform","utilities_framework","web_application_firewall","webcenter_portal","webcenter_sites","weblogic_server"],"affected":[{"vendor":"apache","product":"log4j","ranges":["≥ 2.0 and < 2.3.1","≥ 2.4 and < 2.12.3","≥ 2.13.0 and ≤ 2.16.0"]},{"vendor":"debian","product":"debian_linux","ranges":["10.0","11.0"]},{"vendor":"netapp","product":"cloud_manager","ranges":["all versions"]},{"vendor":"oracle","product":"agile_engineering_data_management","ranges":["6.2.1.0"]},{"vendor":"oracle","product":"agile_plm_mcad_connector","ranges":["3.6"]},{"vendor":"oracle","product":"agile_product_lifecycle_management","ranges":["9.3.6"]},{"vendor":"oracle","product":"autovue_for_agile_product_lifecycle_management","ranges":["21.0.2"]},{"vendor":"oracle","product":"banking_deposits_and_lines_of_credit_servicing","ranges":["2.12.0"]},{"vendor":"oracle","product":"banking_enterprise_default_management","ranges":["2.12.0","2.7.1"]},{"vendor":"oracle","product":"banking_loans_servicing","ranges":["2.12.0"]},{"vendor":"oracle","product":"banking_party_management","ranges":["2.7.0"]},{"vendor":"oracle","product":"banking_payments","ranges":["14.5"]},{"vendor":"oracle","product":"banking_platform","ranges":["2.12.0","2.7.1","2.6.2"]},{"vendor":"oracle","product":"banking_trade_finance","ranges":["14.5"]},{"vendor":"oracle","product":"banking_treasury_management","ranges":["14.5"]},{"vendor":"oracle","product":"business_intelligence","ranges":["5.5.0.0.0"]},{"vendor":"oracle","product":"communications_asap","ranges":["7.3"]},{"vendor":"oracle","product":"communications_billing_and_revenue_management","ranges":["12.0.0.5","12.0.0.4"]},{"vendor":"oracle","product":"communications_cloud_native_core_console","ranges":["1.9.0"]},{"vendor":"oracle","product":"communications_cloud_native_core_network_function_cloud_native_environment","ranges":["1.10.0"]},{"vendor":"oracle","product":"communications_cloud_native_core_network_repository_function","ranges":["1.15.0","1.15.1"]},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function","ranges":["1.8.0"]},{"vendor":"oracle","product":"communications_cloud_native_core_policy","ranges":["1.15.0"]},{"vendor":"oracle","product":"communications_cloud_native_core_security_edge_protection_proxy","ranges":["1.7.0"]},{"vendor":"oracle","product":"communications_cloud_native_core_service_communication_proxy","ranges":["1.15.0"]},{"vendor":"oracle","product":"communications_cloud_native_core_unified_data_repository","ranges":["1.15.0"]},{"vendor":"oracle","product":"communications_convergence","ranges":["3.0.3.0","3.0.2.2.0"]},{"vendor":"oracle","product":"communications_convergent_charging_controller","ranges":["6.0.1.0.0","≥ 12.0.1.0.0 and ≤ 12.0.4.0.0"]},{"vendor":"oracle","product":"communications_diameter_signaling_router","ranges":["≥ 8.3.0.0 and ≤ 8.5.1.0"]},{"vendor":"oracle","product":"communications_eagle_element_management_system","ranges":["46.6"]},{"vendor":"oracle","product":"communications_eagle_ftp_table_base_retrieval","ranges":["4.5"]},{"vendor":"oracle","product":"communications_element_manager","ranges":["< 9.0"]},{"vendor":"oracle","product":"communications_evolved_communications_application_server","ranges":["7.1"]},{"vendor":"oracle","product":"communications_interactive_session_recorder","ranges":["6.3","6.4"]},{"vendor":"oracle","product":"communications_ip_service_activator","ranges":["7.4.0"]},{"vendor":"oracle","product":"communications_messaging_server","ranges":["8.1"]},{"vendor":"oracle","product":"communications_network_charging_and_control","ranges":["6.0.1.0.0","≥ 12.0.1.0.0 and ≤ 12.0.4.0.0"]},{"vendor":"oracle","product":"communications_network_integrity","ranges":["7.3.6"]},{"vendor":"oracle","product":"communications_performance_intelligence_center","ranges":["10.4.0.3"]},{"vendor":"oracle","product":"communications_pricing_design_center","ranges":["12.0.0.5","12.0.0.4"]},{"vendor":"oracle","product":"communications_service_broker","ranges":["6.2"]},{"vendor":"oracle","product":"communications_services_gatekeeper","ranges":["7.0"]},{"vendor":"oracle","product":"communications_session_report_manager","ranges":["< 9.0"]},{"vendor":"oracle","product":"communications_session_route_manager","ranges":["< 9.0"]},{"vendor":"oracle","product":"communications_unified_inventory_management","ranges":["7.4.2","7.3.5","7.4.1"]},{"vendor":"oracle","product":"communications_user_data_repository","ranges":["12.4"]},{"vendor":"oracle","product":"communications_webrtc_session_controller","ranges":["7.2.0.0","7.2.1"]},{"vendor":"oracle","product":"data_integrator","ranges":["12.2.1.3.0","12.2.1.4.0"]},{"vendor":"oracle","product":"e-business_suite","ranges":["12.2"]},{"vendor":"oracle","product":"enterprise_manager_base_platform","ranges":["13.4.0.0","13.5.0.0"]},{"vendor":"oracle","product":"enterprise_manager_for_peoplesoft","ranges":["13.5.1.1","13.4.1.1"]},{"vendor":"oracle","product":"enterprise_manager_ops_center","ranges":["12.4.0.0"]},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure","ranges":["≥ 8.0.7 and ≤ 8.1.1"]},{"vendor":"oracle","product":"financial_services_model_management_and_governance","ranges":["8.1.1.0.0","8.1.0.0.0","8.0.8.0.0"]},{"vendor":"oracle","product":"flexcube_universal_banking","ranges":["11.83.3","≥ 14.0.0 and ≤ 14.3.0","≥ 12.1.0 and ≤ 12.4","14.5"]},{"vendor":"oracle","product":"health_sciences_empirica_signal","ranges":["9.1.0.6","9.2.0.0"]},{"vendor":"oracle","product":"health_sciences_inform","ranges":["6.2.1.1","7.0.0.0","6.3.2.1"]},{"vendor":"oracle","product":"health_sciences_information_manager","ranges":["≥ 3.0.1 and ≤ 3.0.4"]},{"vendor":"oracle","product":"healthcare_data_repository","ranges":["8.1.1"]},{"vendor":"oracle","product":"healthcare_foundation","ranges":["≥ 7.3.0.1 and ≤ 7.3.0.4"]},{"vendor":"oracle","product":"healthcare_master_person_index","ranges":["5.0.1"]},{"vendor":"oracle","product":"healthcare_translational_research","ranges":["4.1.1","4.1.0"]},{"vendor":"oracle","product":"hospitality_suite8","ranges":["8.14.0","8.13.0"]},{"vendor":"oracle","product":"hospitality_token_proxy_service","ranges":["19.2"]},{"vendor":"oracle","product":"hyperion_bi\\+","ranges":["< 11.2.8.0"]},{"vendor":"oracle","product":"hyperion_data_relationship_management","ranges":["< 11.2.8.0"]},{"vendor":"oracle","product":"hyperion_infrastructure_technology","ranges":["< 11.2.8.0"]},{"vendor":"oracle","product":"hyperion_planning","ranges":["< 11.2.8.0"]},{"vendor":"oracle","product":"hyperion_profitability_and_cost_management","ranges":["< 11.2.8.0"]},{"vendor":"oracle","product":"hyperion_tax_provision","ranges":["< 11.2.8.0"]},{"vendor":"oracle","product":"identity_management_suite","ranges":["12.2.1.4.0","12.2.1.3.0"]},{"vendor":"oracle","product":"identity_manager_connector","ranges":["9.1.0"]},{"vendor":"oracle","product":"instantis_enterprisetrack","ranges":["17.1","17.3","17.2"]},{"vendor":"oracle","product":"insurance_data_gateway","ranges":["1.0.1"]},{"vendor":"oracle","product":"insurance_insbridge_rating_and_underwriting","ranges":["≥ 5.4 and ≤ 5.6.0.0","5.2.0","5.6.1.0"]},{"vendor":"oracle","product":"jdeveloper","ranges":["12.2.1.4.0"]},{"vendor":"oracle","product":"managed_file_transfer","ranges":["12.2.1.3.0","12.2.1.4.0"]},{"vendor":"oracle","product":"management_cloud_engine","ranges":["1.5.0"]},{"vendor":"oracle","product":"mysql_enterprise_monitor","ranges":["≤ 8.0.29"]},{"vendor":"oracle","product":"payment_interface","ranges":["19.1","20.3"]},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools","ranges":["8.58","8.59"]},{"vendor":"oracle","product":"primavera_gateway","ranges":["≥ 20.12.0 and ≤ 20.12.7","21.12.0","≥ 19.12.0 and ≤ 19.12.12","≥ 18.8.0 and ≤ 18.8.13","≥ 17.12.0 and ≤ 17.12.11"]},{"vendor":"oracle","product":"primavera_p6_enterprise_project_portfolio_management","ranges":["≥ 20.12.0.0 and ≤ 20.12.12.0","21.12.0.0","≥ 19.12.0.0 and ≤ 19.12.18.0"]},{"vendor":"oracle","product":"primavera_unifier","ranges":["21.12","18.8","19.12","20.12"]},{"vendor":"oracle","product":"retail_back_office","ranges":["14.1"]},{"vendor":"oracle","product":"retail_central_office","ranges":["14.1"]},{"vendor":"oracle","product":"retail_customer_insights","ranges":["16.0.2","15.0.2"]},{"vendor":"oracle","product":"retail_data_extractor_for_merchandising","ranges":["16.0.2","15.0.2"]},{"vendor":"oracle","product":"retail_eftlink","ranges":["19.0.1","16.0.3","17.0.2","18.0.1","20.0.1","21.0.0"]},{"vendor":"oracle","product":"retail_financial_integration","ranges":["≥ 16.0.1 and ≤ 16.0.3","19.0.1","19.0.0","15.0.3.1","14.1.3.2"]},{"vendor":"oracle","product":"retail_integration_bus","ranges":["19.0.1","≥ 16.0.1 and ≤ 16.0.3","≥ 19.0.0 and ≤ 19.0.1.0","14.1.3","14.1.3.2","15.0.3.1","19.0.0"]},{"vendor":"oracle","product":"retail_invoice_matching","ranges":["15.0.3","16.0.3"]},{"vendor":"oracle","product":"retail_merchandising_system","ranges":["16.0.3","19.0.1"]},{"vendor":"oracle","product":"retail_order_broker","ranges":["18.0","16.0","19.1"]},{"vendor":"oracle","product":"retail_order_management_system","ranges":["19.5"]},{"vendor":"oracle","product":"retail_point-of-service","ranges":["14.1"]},{"vendor":"oracle","product":"retail_predictive_application_server","ranges":["16.0.3.240","15.0.3.115","14.1.3.46"]},{"vendor":"oracle","product":"retail_price_management","ranges":["15.0.3.0","13.2","14.0.4","14.1.3.0","16.0.3.0"]},{"vendor":"oracle","product":"retail_returns_management","ranges":["14.1"]},{"vendor":"oracle","product":"retail_service_backbone","ranges":["≥ 16.0.1 and ≤ 16.0.3","14.1.3","15.0.3.1","14.1.3.2","19.0.1.0","19.0.1","19.0.0"]},{"vendor":"oracle","product":"retail_store_inventory_management","ranges":["14.0.4.13","14.1.3.14","15.0.3.3","15.0.3.8","16.0.3.7","14.1.3.5"]},{"vendor":"oracle","product":"siebel_ui_framework","ranges":["≤ 21.12"]},{"vendor":"oracle","product":"sql_developer","ranges":["< 21.4.2"]},{"vendor":"oracle","product":"taleo_platform","ranges":["< 22.1"]},{"vendor":"oracle","product":"utilities_framework","ranges":["4.4.0.2.0","≥ 4.3.0.1.0 and ≤ 4.3.0.6.0","4.4.0.0.0","4.4.0.3.0"]},{"vendor":"oracle","product":"webcenter_portal","ranges":["12.2.1.3.0","12.2.1.4.0"]},{"vendor":"oracle","product":"webcenter_sites","ranges":["12.2.1.3.0","12.2.1.4.0"]},{"vendor":"oracle","product":"weblogic_server","ranges":["12.2.1.3.0","14.1.1.0.0","12.2.1.4.0"]},{"vendor":"sonicwall","product":"6bk1602-0aa12-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"sonicwall","product":"6bk1602-0aa22-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"sonicwall","product":"6bk1602-0aa32-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"sonicwall","product":"6bk1602-0aa42-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"sonicwall","product":"6bk1602-0aa52-0tp0_firmware","ranges":["< 2.7.0"]},{"vendor":"sonicwall","product":"email_security","ranges":["≤ 10.0.12"]},{"vendor":"sonicwall","product":"network_security_manager","ranges":["≥ 2.0 and < 3.0"]},{"vendor":"sonicwall","product":"web_application_firewall","ranges":["≥ 3.0.0 and < 3.1.0"]}]}