This is a map of CVEs and Log4j 2 Versions.
| CVE | Affects | Fixed In | Java Required |
|---|---|---|---|
| CVE-2021-45105 | 2.0-beta9 to 2.16.0, excluding 2.12.3 | 2.17.0 2.12.3 2.3.1 | Java 8 Java 7 Java 6 |
| CVE-2021-45046 | 2.0-beta9 to 2.15.0, excluding 2.12.2 | 2.16.0 2.12.2 2.3.1 | Java 8 Java 7 Java 6 |
| CVE-2021-44228 | 2.0-beta9 to 2.16.0, excluding 2.12.3 & 2.3.1 | 2.17.0 2.12.3 2.3.1 | Java 8 Java 7 Java 6 |
| CVE-2020-9488 | 2.0-alpha1 to 2.13.1 | 2.13.2 2.12.3 | Java 8 Java 7 |
| CVE-2017-5645 | 2.0-alpha1 to 2.8.1 | 2.8.2 | Java 7 |
This is a map of CVEs and Log4j 1 End-of-Life Versions.
| CVE | Affects | Fixed In | Java Required |
|---|---|---|---|
| CVE-2019-17571 | 1.2 to 1.2.17 | Not fixed | Not fixed |