Spreadsheet: 791395d1660321207-parsing-out-data-from-a-cel-test
Sheet: Sheet2

Line of Business | BTO Alignment | IT Owner | Support Person | Asset_ID | AppName | Division | Owns/Uses | Zone | Overdue | Solution | HostName | IP | port | Environment | [NAME] | PluginID | CVE | PluginName | pluginText | Status | Severity | ExploitAvailable | Day of TargetRemediationDate | Day of FirstSeen | Day of LastSeen | Protocol | VPR | Aging | Aging Band | AppScore | Synopsis | POC | path
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar_x000D_   Installed version : 1.2.5_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO | /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar