Apache Software Foundation Apache Log4j2

• CVE-2021-44228 Critical 10.0 Exploited Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints 100.0%
• CVE-2021-44832 Medium 6.6 Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration 97.9%
• CVE-2021-45105 Medium 5.9 Apache Log4j2 does not always protect from infinite recursion in lookup evaluation 100.0%