Description
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Affected Platforms
Oracle Communications Session Report ManagerOracle Communications User Data RepositoryOracle Hyperion Infrastructure TechnologyDebian Debian LinuxOracle Communications Unified Inventory ManagementOracle Banking Enterprise Default ManagementOracle Hyperion Profitability And Cost ManagementSonicwall 6Bk1602-0Aa12-0Tp0Oracle Agile PlmOracle Communications Ip Service Activator
Weakness Type
CWE-20, CWE-674, CWE-20, CWE-674