Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2022-23307

CVSS 3.1
8.8 high
EPSS
54%p99
Published
·
Modified
Analyze CVE-2022-23307 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

Vendors
apacheqosoracle
Products
chainsaw, log4j, reload4j, advanced supply chain planning, business intelligence, business process management suite, communications eagle ftp table base retrieval, communications instant messaging server, communications messaging server, communications network integrity, communications offline mediation controller, communications unified inventory management
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (54.4%)

In the news

1 story