Apache Apache Log4j

• CVE-2020-9488 Low 3.7 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messa 8.2%