CVE-2022-23307

—

CVSS 3.1

8.8 high

EPSS

54%p99

Published

Jan 18, 2022 (Jan 18, 2022)

Modified

Jun 17, 2026

Description

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

Vendors: apache qos oracle
Products: chainsaw, log4j, reload4j, advanced supply chain planning, business intelligence, business process management suite, communications eagle ftp table base retrieval, communications instant messaging server, communications messaging server, communications network integrity, communications offline mediation controller, communications unified inventory management
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (54.4%)

In the news1 stories

Two-Fifths of Log4j Apps Use Vulnerable Versions

Infosecurity MagazineDec 11, 09:30 UTC · Dec 11, 2023Vulnerability CVE-2022-23307 CVE-2022-23305 CVE-2022-23302+2 CVEs