GHSA-fxph-q3j8-mv87 · Severity: critical · Ecosystem: maven — Deserialization of Untrusted Data in Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
Conclusion & alert: CVE-2017-5645 is rated High Risk (76.2/100): CVSS Critical severity, with high exploitation likelihood (EPSS 94.01%, 100th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +2.07% over the last day, indicating growing attacker interest. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2025-11-21 | 91.95% | 94.01% | +2.07% |
| 2 | 2025-11-18 | 94.01% | 91.95% | -2.07% |
| 3 | 2025-08-22 | — | 94.01% | — |
Full EPSS history (30 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 9.8 | 3.1 | CRITICAL |
|
3.9 | 5.9 | [email protected] |
| 7.5 | 2.0 | HIGH |
|
10.0 | 6.4 | [email protected] |
GHSA-fxph-q3j8-mv87 · Severity: critical · Ecosystem: maven — Deserialization of Untrusted Data in Log4j
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2017-5645 not yet assigned priority: Debian including 1 source packages (apache-log4j2), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. | https://security-tracker.debian.org/tracker/CVE-2017-5645 |
redhat
|
high | — | https://access.redhat.com/security/cve/CVE-2017-5645 |
suse
|
medium | — | https://www.suse.com/security/cve/CVE-2017-5645/ |
ubuntu
|
medium | CVE-2017-5645 medium priority: Ubuntu including 1 source packages (apache-log4j2), 23 status rows across 23 suites (artful, bionic, cosmic, disco, eoan, focal, groovy, hirsute, impish, jammy, kinetic, lunar, mantic, noble, oracular, plucky, precise, questing, trusty, upstream, xenial, yakkety, zesty): not-affected 16, ignored 3, DNE 2, needed 1, released 1. | https://ubuntu.com/security/CVE-2017-5645 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| apache | log4j | >= 2.0, < 2.8.2 | cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* |
| netapp | oncommand_api_services | — | cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:* |
| netapp | oncommand_insight | — | cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* |
| netapp | oncommand_workflow_automation | — | cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* |
| netapp | service_level_manager | — | cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:* |
| netapp | snapcenter | — | cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* |
| netapp | storage_automation_store | — | cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:* |
| redhat | fuse | 1.0 | cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 6.0 | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 6.7 | cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 7.0 | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 7.3 | cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 7.4 | cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 7.5 | cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 7.6 | cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:* |
| redhat | enterprise_linux_desktop | 7.0 | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server | 7.0 | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_aus | 7.4 | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_aus | 7.6 | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_eus | 7.4 | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_eus | 7.5 | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_eus | 7.6 | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_tus | 7.4 | cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_tus | 7.6 | cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* |
| redhat | enterprise_linux_workstation | 7.0 | cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* |
| oracle | api_gateway | 11.1.2.4.0 | cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:* |
| oracle | application_testing_suite | 13.3.0.1 | cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* |
| oracle | autovue_vuelink_integration | 21.0.0 | cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.0:*:*:*:*:*:*:* |
| oracle | autovue_vuelink_integration | 21.0.1 | cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.1:*:*:*:*:*:*:* |
| oracle | banking_platform | 2.6.0 | cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:* |
| oracle | banking_platform | 2.6.1 | cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:* |
| oracle | banking_platform | 2.6.2 | cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* |
| oracle | bi_publisher | 11.1.1.7.0 | cpe:2.3:a:oracle:bi_publisher:11.1.1.7.0:*:*:*:*:*:*:* |
| oracle | bi_publisher | 11.1.1.9.0 | cpe:2.3:a:oracle:bi_publisher:11.1.1.9.0:*:*:*:*:*:*:* |
| oracle | bi_publisher | 12.2.1.3.0 | cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | bi_publisher | 12.2.1.4.0 | cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:* |
| oracle | communications_converged_application_server_-_service_controller | 6.1 | cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.1:*:*:*:*:*:*:* |
| oracle | communications_instant_messaging_server | 10.0.1.3.0 | cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.3.0:*:*:*:*:*:*:* |
| oracle | communications_interactive_session_recorder | >= 6.0, <= 6.2 | cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* |
| oracle | communications_messaging_server | < 8.0.2 | cpe:2.3:a:oracle:communications_messaging_server:*:*:*:*:*:*:*:* |
| oracle | communications_network_integrity | >= 7.3.2, <= 7.3.6 | cpe:2.3:a:oracle:communications_network_integrity:*:*:*:*:*:*:*:* |
| oracle | communications_online_mediation_controller | 6.1 | cpe:2.3:a:oracle:communications_online_mediation_controller:6.1:*:*:*:*:*:*:* |
| oracle | communications_pricing_design_center | 11.1 | cpe:2.3:a:oracle:communications_pricing_design_center:11.1:*:*:*:*:*:*:* |
| oracle | communications_pricing_design_center | 12.0 | cpe:2.3:a:oracle:communications_pricing_design_center:12.0:*:*:*:*:*:*:* |
| oracle | communications_service_broker | 6.0 | cpe:2.3:a:oracle:communications_service_broker:6.0:*:*:*:*:*:*:* |
| oracle | communications_webrtc_session_controller | < 7.2 | cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:* |
| oracle | configuration_manager | 12.1.2.0.2 | cpe:2.3:a:oracle:configuration_manager:12.1.2.0.2:*:*:*:*:*:*:* |
| oracle | configuration_manager | 12.1.2.0.5 | cpe:2.3:a:oracle:configuration_manager:12.1.2.0.5:*:*:*:*:*:*:* |
| oracle | endeca_information_discovery_studio | 3.2.0 | cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:* |
| oracle | enterprise_data_quality | 12.2.1.3.0 | cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | enterprise_manager_base_platform | 12.1.0.5 | cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5:*:*:*:*:*:*:* |
| oracle | enterprise_manager_base_platform | 13.2.0.0 | cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_fusion_middleware | 12.1.0.5 | cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:12.1.0.5:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_fusion_middleware | 13.2.0.0 | cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:13.2.0.0:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_mysql_database | <= 13.2.2.0.0 | cpe:2.3:a:oracle:enterprise_manager_for_mysql_database:*:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_oracle_database | 12.1.0.8 | cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:12.1.0.8:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_oracle_database | 13.2.2 | cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:13.2.2:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_peoplesoft | 13.1.1.1 | cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.1.1.1:*:*:*:*:*:*:* |
| oracle | enterprise_manager_for_peoplesoft | 13.2.1.1 | cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.2.1.1:*:*:*:*:*:*:* |
| oracle | financial_services_analytical_applications_infrastructure | >= 7.3.3.0.0, <= 7.3.3.0.2 | cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* |
| oracle | financial_services_analytical_applications_infrastructure | >= 8.0.0.0.0, <= 8.0.7.0.0 | cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* |
| oracle | financial_services_behavior_detection_platform | >= 8.0.0.0.0, <= 8.0.4.0.0 | cpe:2.3:a:oracle:financial_services_behavior_detection_platform:*:*:*:*:*:*:*:* |
| oracle | financial_services_behavior_detection_platform | 6.1.1 | cpe:2.3:a:oracle:financial_services_behavior_detection_platform:6.1.1:*:*:*:*:*:*:* |
| oracle | financial_services_hedge_management_and_ifrs_valuations | 8.0.4 | cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.4:*:*:*:*:*:*:* |
| oracle | financial_services_hedge_management_and_ifrs_valuations | 8.0.5 | cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.5:*:*:*:*:*:*:* |
| oracle | financial_services_lending_and_leasing | >= 14.1.0, <= 14.8.0 | cpe:2.3:a:oracle:financial_services_lending_and_leasing:*:*:*:*:*:*:*:* |
| oracle | financial_services_lending_and_leasing | 12.5.0 | cpe:2.3:a:oracle:financial_services_lending_and_leasing:12.5.0:*:*:*:*:*:*:* |
| oracle | financial_services_loan_loss_forecasting_and_provisioning | 8.0.4 | cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.4:*:*:*:*:*:*:* |
| oracle | financial_services_loan_loss_forecasting_and_provisioning | 8.0.5 | cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.5:*:*:*:*:*:*:* |
| oracle | financial_services_profitability_management | >= 8.0.0.0.0, <= 8.0.7.0.0 | cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* |
| oracle | financial_services_profitability_management | 6.1.1 | cpe:2.3:a:oracle:financial_services_profitability_management:6.1.1:*:*:*:*:*:*:* |
| oracle | financial_services_regulatory_reporting_with_agilereporter | 8.0.9.2.0 | cpe:2.3:a:oracle:financial_services_regulatory_reporting_with_agilereporter:8.0.9.2.0:*:*:*:*:*:*:* |
| oracle | flexcube_investor_servicing | 12.0.4 | cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:* |
| oracle | flexcube_investor_servicing | 12.1.0 | cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:* |
| oracle | flexcube_investor_servicing | 12.3.0 | cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:* |
| oracle | flexcube_investor_servicing | 12.4.0 | cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:* |
| oracle | flexcube_investor_servicing | 14.0.0 | cpe:2.3:a:oracle:flexcube_investor_servicing:14.0.0:*:*:*:*:*:*:* |
| oracle | fusion_middleware_mapviewer | 12.2.1.2 | cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2:*:*:*:*:*:*:* |
| oracle | fusion_middleware_mapviewer | 12.2.1.3 | cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3:*:*:*:*:*:*:* |
| oracle | goldengate | 12.3.2.1.1 | cpe:2.3:a:oracle:goldengate:12.3.2.1.1:*:*:*:*:*:*:* |