Apache Software Foundation Apache Log4j 1.x

• CVE-2022-23307 High 8.8 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 54.4%
• CVE-2022-23305 Critical 9.8 SQL injection in JDBC Appender in Apache Log4j V1 66.5%
• CVE-2022-23302 High 8.8 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 63.8%
• CVE-2021-4104 High 7.5 Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 80.6%