Apache Log4j 1.x Multiple Vulnerabilities

critical Nessus Plugin ID 156860

Version 1.12

Jun 13, 2024, 3:55 PM

  • Required Scan configuration (removed paranoid requirement)

Plugin Feed: 202406131555

Version 1.11

Jun 7, 2024, 7:08 PM

  • Detection (added backport check)

Plugin Feed: 202406071908

Version 1.10

Nov 21, 2023, 1:14 AM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available")

Plugin Feed: 202311210114

Version 1.9

Oct 6, 2023, 5:06 PM

  • IAVM reference
  • STIG Severity (set to "I")

Plugin Feed: 202310061706

Version 1.8

Mar 13, 2023, 6:45 PM

  • CVE (Added CVE-2023-26464)

Plugin Feed: 202303131845

Version 1.7

Dec 6, 2022, 2:54 AM

  • Reference

Plugin Feed: 202212060254

* Changelogs are generally available for changes made after Nov 1, 2022