log4shell-the-new-heartbleed Blog Related Topics 
Security Boulevard
MAY 5, 2022
On May 4, 2022, the Cybersecurity & Infrastructure Security Agency (CISA) added five “new” vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog. Three of the entries were originally disclosed in 2014, including the infamous Heartbleed vulnerability (CVE-2014-0160).
eSecurity Planet
DECEMBER 10, 2021
The vulnerability – which has been dubbed Log4Shell – has been given a severity score of 10/10, the highest score possible. Log4Shell reportedly also can impact the default configurations of several Apache frameworks, such as Apache Struts2, Apache Druid and Apache Flink. release of Log4j 2 that fixes the RCE vulnerability.
Security Boulevard
MARCH 17, 2022
As evidenced by the recent Log4Shell vulnerability, the OSS supply chain is increasingly a focus for attackers seeking to exploit weak links in security. As evidenced by the recent Log4Shell vulnerability, the OSS supply chain is increasingly a focus for attackers seeking to exploit weak links in security. By Dan Lorenc, Chainguard.
Expert insights. Personalized for you.
52 
Let's personalize your content