{
  "document": {
    "category": "Siemens Security Advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited.",
      "tlp": {
        "label": "WHITE"
      }
    },
    "notes": [
      {
        "category": "summary",
        "text": "On 2021-12-09, a vulnerability in Apache Log4j (a logging library used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and is also known as \"Log4Shell\".\n\nOn 2021-12-14 an additional denial of service vulnerability (CVE-2021-45046) was published rendering the initial mitigations and fix in version 2.15.0 as incomplete under certain non-default configurations. Log4j versions 2.16.0 and 2.12.2 are supposed to fix both vulnerabilities.\n\nOn 2021-12-17, CVE-2021-45046 was reclassified with an increased CVSS base score (from 3.7 to 9.0). The potential impact of CVE-2021-45046 now includes - besides denial of service - also information disclosure and local (and potential remote) code execution.\n\nSiemens Energy is preparing updates and recommends specific countermeasures for SPPA-T3000.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens Energy strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens Energy strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens Energy strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
      },
      {
        "category": "self",
        "summary": "SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-714170.txt"
      },
      {
        "category": "self",
        "summary": "SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-714170.json"
      }
    ],
    "title": "SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000",
    "tracking": {
      "current_release_date": "2022-02-08T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-714170",
      "initial_release_date": "2021-12-16T00:00:00Z",
      "revision_history": [
        {
          "date": "2021-12-16T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2022-02-08T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Revised severity of CVE-2021-45046; added specific document title provided in Siemens Energy customer portal"
        }
      ],
      "status": "interim",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SPPA-T3000 SeS3000 Security Server (6DU7054-0..00-..A0)",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "SPPA-T3000 SeS3000 Security Server (6DU7054-0..00-..A0)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-44228",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Apache Log4j V2, versions \u003c 2.15.0 do not protect JNDI features (as used in configuration, log messages, and parameters) against attacker controlled LDAP and other JNDI related endpoints.\n\nAn attacker who can control log messages or log message parameters could execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-44228 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-44228.json"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Specific mitigations and how to apply are described in the SE Controls Security Announcement Incident 2021-01, available in the customer portal.\n\nhttps://cep.siemens-energy.com/cep/",
          "product_ids": [
            "1"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no remediation is available",
          "product_ids": [
            "1"
          ]
        },
        {
          "category": "mitigation",
          "details": "Ensure that SPPA-T3000 is set up according to the security concept defined in the SPPA-T3000 security manual",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-44228"
    },
    {
      "cve": "CVE-2021-45046",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The fix to address CVE-2021-44228 was incomplete in certain non-default configurations, when the logging configuration uses a non-default Pattern Layout with a Context Lookup (for example, ${ctx:loginId}).\n\nThis could allow attackers with control over Thread Context Map (MDC) input data to craft malicious input data using a JNDI Lookup pattern, resulting in an information leak and remote code execution in some environments and local code execution in all environments.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-45046 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-45046.json"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Specific mitigations and how to apply are described in the SE Controls Security Announcement Incident 2021-01, available in the customer portal.\n\nhttps://cep.siemens-energy.com/cep/",
          "product_ids": [
            "1"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no remediation is available",
          "product_ids": [
            "1"
          ]
        },
        {
          "category": "mitigation",
          "details": "Ensure that SPPA-T3000 is set up according to the security concept defined in the SPPA-T3000 security manual",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-45046"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for storm",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for storm fixes the following issues:\n\n- Remove JndiLookup from log4j 2.x jars during build to prevent \u0027log4shell\u0027 code injection. (bsc#1193641, bsc#1193611, CVE-2021-44228)\n- Remove JMSAppender from log4j 1.2.x jars during build to prevent attacks when JMS is enabled (bsc#1193641, bsc#1193662, CVE-2021-4104)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "HPE-Helion-OpenStack-8-2021-4096,SUSE-2021-4096,SUSE-OpenStack-Cloud-8-2021-4096,SUSE-OpenStack-Cloud-Crowbar-8-2021-4096",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_4096-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2021:4096-1",
        "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20214096-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2021:4096-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009911.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193611",
        "url": "https://bugzilla.suse.com/1193611"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193641",
        "url": "https://bugzilla.suse.com/1193641"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193662",
        "url": "https://bugzilla.suse.com/1193662"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-4104 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-4104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-44228 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-44228/"
      }
    ],
    "title": "Security update for storm",
    "tracking": {
      "current_release_date": "2021-12-15T10:31:48Z",
      "generator": {
        "date": "2021-12-15T10:31:48Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2021:4096-1",
      "initial_release_date": "2021-12-15T10:31:48Z",
      "revision_history": [
        {
          "date": "2021-12-15T10:31:48Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-doc-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-doc-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-doc-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-logviewer-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-logviewer-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-logviewer-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-nimbus-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-nimbus-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-nimbus-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-pacemaker-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-pacemaker-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-pacemaker-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-supervisor-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-supervisor-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-supervisor-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-ui-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-ui-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-ui-1.2.3-3.8.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-zookeeper-1.2.3-3.8.2.aarch64",
                "product": {
                  "name": "storm-zookeeper-1.2.3-3.8.2.aarch64",
                  "product_id": "storm-zookeeper-1.2.3-3.8.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
                  "product_id": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "storm-kit-1.2.3-3.10.1.noarch",
                "product": {
                  "name": "storm-kit-1.2.3-3.10.1.noarch",
                  "product_id": "storm-kit-1.2.3-3.10.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-aarch64-2.2.2~dev1-11.32.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-aarch64-2.2.2~dev1-11.32.1.noarch",
                  "product_id": "venv-openstack-monasca-aarch64-2.2.2~dev1-11.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-ppc64le-2.2.2~dev1-11.32.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-ppc64le-2.2.2~dev1-11.32.1.noarch",
                  "product_id": "venv-openstack-monasca-ppc64le-2.2.2~dev1-11.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-s390x-2.2.2~dev1-11.32.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-s390x-2.2.2~dev1-11.32.1.noarch",
                  "product_id": "venv-openstack-monasca-s390x-2.2.2~dev1-11.32.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-doc-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-doc-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-doc-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-logviewer-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-logviewer-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-logviewer-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-nimbus-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-nimbus-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-nimbus-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-pacemaker-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-pacemaker-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-pacemaker-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-supervisor-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-supervisor-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-supervisor-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-ui-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-ui-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-ui-1.2.3-3.8.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-zookeeper-1.2.3-3.8.2.ppc64le",
                "product": {
                  "name": "storm-zookeeper-1.2.3-3.8.2.ppc64le",
                  "product_id": "storm-zookeeper-1.2.3-3.8.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-nimbus-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-nimbus-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-nimbus-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-supervisor-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-supervisor-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-supervisor-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-doc-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-doc-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-doc-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-logviewer-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-logviewer-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-logviewer-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-pacemaker-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-pacemaker-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-pacemaker-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-ui-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-ui-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-ui-1.2.3-3.8.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-zookeeper-1.2.3-3.8.2.x86_64",
                "product": {
                  "name": "storm-zookeeper-1.2.3-3.8.2.x86_64",
                  "product_id": "storm-zookeeper-1.2.3-3.8.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "HPE Helion OpenStack 8",
                "product": {
                  "name": "HPE Helion OpenStack 8",
                  "product_id": "HPE Helion OpenStack 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:hpe-helion-openstack:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 8",
                "product": {
                  "name": "SUSE OpenStack Cloud 8",
                  "product_id": "SUSE OpenStack Cloud 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 8",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 8",
                  "product_id": "SUSE OpenStack Cloud Crowbar 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-1.2.3-3.8.2.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-nimbus-1.2.3-3.8.2.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-nimbus-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-supervisor-1.2.3-3.8.2.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-supervisor-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch"
        },
        "product_reference": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-1.2.3-3.8.2.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-nimbus-1.2.3-3.8.2.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-nimbus-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-supervisor-1.2.3-3.8.2.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-supervisor-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch"
        },
        "product_reference": "venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-1.2.3-3.8.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-nimbus-1.2.3-3.8.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-nimbus-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-supervisor-1.2.3-3.8.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
        },
        "product_reference": "storm-supervisor-1.2.3-3.8.2.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-4104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-4104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64",
          "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64",
          "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64",
          "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
          "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
          "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-4104",
          "url": "https://www.suse.com/security/cve/CVE-2021-4104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193662 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1193662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193978 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1193978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194016 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1194016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194842 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1194842"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-12-15T10:31:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-4104"
    },
    {
      "cve": "CVE-2021-44228",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-44228"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64",
          "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64",
          "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64",
          "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
          "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
          "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-44228",
          "url": "https://www.suse.com/security/cve/CVE-2021-44228"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193611 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193662 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193743 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193795 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194016 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1194016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194123 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1194123"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202994 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1202994"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:storm-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "HPE Helion OpenStack 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:storm-supervisor-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud 8:venv-openstack-monasca-x86_64-2.2.2~dev1-11.32.1.noarch",
            "SUSE OpenStack Cloud Crowbar 8:storm-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-nimbus-1.2.3-3.8.2.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:storm-supervisor-1.2.3-3.8.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-12-15T10:31:48Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2021-44228"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for storm-kit",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for storm-kit fixes the following issues:\n\n- Remove JndiLookup from log4j 2.x jars during build to\n  prevent \u0027log4shell\u0027 code injection. (bsc#1193641, bsc#1193611, CVE-2021-44228)\n- Remove JMSAppender from log4j 1.2.x jars during build to prevent attacks when JMS is enabled (bsc#1193641, bsc#1193662, CVE-2021-4104)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2021-4097,SUSE-OpenStack-Cloud-9-2021-4097,SUSE-OpenStack-Cloud-Crowbar-9-2021-4097",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_4097-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2021:4097-1",
        "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20214097-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2021:4097-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009912.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193611",
        "url": "https://bugzilla.suse.com/1193611"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193641",
        "url": "https://bugzilla.suse.com/1193641"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193662",
        "url": "https://bugzilla.suse.com/1193662"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-4104 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-4104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-44228 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-44228/"
      }
    ],
    "title": "Security update for storm-kit",
    "tracking": {
      "current_release_date": "2021-12-15T10:32:17Z",
      "generator": {
        "date": "2021-12-15T10:32:17Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2021:4097-1",
      "initial_release_date": "2021-12-15T10:32:17Z",
      "revision_history": [
        {
          "date": "2021-12-15T10:32:17Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-doc-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-doc-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-doc-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-logviewer-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-logviewer-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-logviewer-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-nimbus-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-nimbus-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-nimbus-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-pacemaker-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-pacemaker-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-pacemaker-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-supervisor-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-supervisor-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-supervisor-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-ui-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-ui-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-ui-1.2.3-3.5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-zookeeper-1.2.3-3.5.1.aarch64",
                "product": {
                  "name": "storm-zookeeper-1.2.3-3.5.1.aarch64",
                  "product_id": "storm-zookeeper-1.2.3-3.5.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-kit-1.2.3-3.6.2.noarch",
                "product": {
                  "name": "storm-kit-1.2.3-3.6.2.noarch",
                  "product_id": "storm-kit-1.2.3-3.6.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-aarch64-2.7.1~dev10-3.25.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-aarch64-2.7.1~dev10-3.25.1.noarch",
                  "product_id": "venv-openstack-monasca-aarch64-2.7.1~dev10-3.25.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-ppc64le-2.7.1~dev10-3.25.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-ppc64le-2.7.1~dev10-3.25.1.noarch",
                  "product_id": "venv-openstack-monasca-ppc64le-2.7.1~dev10-3.25.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-s390x-2.7.1~dev10-3.25.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-s390x-2.7.1~dev10-3.25.1.noarch",
                  "product_id": "venv-openstack-monasca-s390x-2.7.1~dev10-3.25.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
                "product": {
                  "name": "venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
                  "product_id": "venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-doc-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-doc-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-doc-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-logviewer-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-logviewer-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-logviewer-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-nimbus-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-nimbus-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-nimbus-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-pacemaker-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-pacemaker-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-pacemaker-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-supervisor-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-supervisor-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-supervisor-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-ui-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-ui-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-ui-1.2.3-3.5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "storm-zookeeper-1.2.3-3.5.1.ppc64le",
                "product": {
                  "name": "storm-zookeeper-1.2.3-3.5.1.ppc64le",
                  "product_id": "storm-zookeeper-1.2.3-3.5.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "storm-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-doc-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-doc-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-doc-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-logviewer-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-logviewer-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-logviewer-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-nimbus-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-nimbus-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-nimbus-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-pacemaker-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-pacemaker-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-pacemaker-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-supervisor-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-supervisor-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-supervisor-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-ui-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-ui-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-ui-1.2.3-3.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "storm-zookeeper-1.2.3-3.5.1.x86_64",
                "product": {
                  "name": "storm-zookeeper-1.2.3-3.5.1.x86_64",
                  "product_id": "storm-zookeeper-1.2.3-3.5.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 9",
                "product": {
                  "name": "SUSE OpenStack Cloud 9",
                  "product_id": "SUSE OpenStack Cloud 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 9",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 9",
                  "product_id": "SUSE OpenStack Cloud Crowbar 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-1.2.3-3.5.1.x86_64 as component of SUSE OpenStack Cloud 9",
          "product_id": "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64"
        },
        "product_reference": "storm-1.2.3-3.5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-nimbus-1.2.3-3.5.1.x86_64 as component of SUSE OpenStack Cloud 9",
          "product_id": "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64"
        },
        "product_reference": "storm-nimbus-1.2.3-3.5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-supervisor-1.2.3-3.5.1.x86_64 as component of SUSE OpenStack Cloud 9",
          "product_id": "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64"
        },
        "product_reference": "storm-supervisor-1.2.3-3.5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch as component of SUSE OpenStack Cloud 9",
          "product_id": "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch"
        },
        "product_reference": "venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-1.2.3-3.5.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
          "product_id": "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64"
        },
        "product_reference": "storm-1.2.3-3.5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-nimbus-1.2.3-3.5.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
          "product_id": "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64"
        },
        "product_reference": "storm-nimbus-1.2.3-3.5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "storm-supervisor-1.2.3-3.5.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
          "product_id": "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
        },
        "product_reference": "storm-supervisor-1.2.3-3.5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-4104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-4104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
          "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-4104",
          "url": "https://www.suse.com/security/cve/CVE-2021-4104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193662 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1193662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193978 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1193978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194016 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1194016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194842 for CVE-2021-4104",
          "url": "https://bugzilla.suse.com/1194842"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
            "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
            "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-12-15T10:32:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-4104"
    },
    {
      "cve": "CVE-2021-44228",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-44228"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
          "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-44228",
          "url": "https://www.suse.com/security/cve/CVE-2021-44228"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193611 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193662 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193743 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193795 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1193795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194016 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1194016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194123 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1194123"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202994 for CVE-2021-44228",
          "url": "https://bugzilla.suse.com/1202994"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
            "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:storm-supervisor-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.25.1.noarch",
            "SUSE OpenStack Cloud Crowbar 9:storm-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-nimbus-1.2.3-3.5.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:storm-supervisor-1.2.3-3.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-12-15T10:32:17Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2021-44228"
    }
  ]
}

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1.1"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.17900.52\\)"
      },
      {
        "_id": null,
        "model": "virtualized infrastructure manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.2.0"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.009\\(001.001\\)"
      },
      {
        "_id": null,
        "model": "integrated management controller supervisor",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.3.2.1"
      },
      {
        "_id": null,
        "model": "customer experience cloud agent",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.12.1"
      },
      {
        "_id": null,
        "model": "6bk1602-0aa42-0tp0",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7.0"
      },
      {
        "_id": null,
        "model": "sipass integrated",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.80"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.3"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.5"
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6"
      },
      {
        "_id": null,
        "model": "unified sip proxy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "010.000\\(001\\)"
      },
      {
        "_id": null,
        "model": "desigo cc info center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "cloudcenter suite",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.5.1"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "unified workforce optimization",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "automated subsea tuning",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "02.01.00"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(2\\)"
      },
      {
        "_id": null,
        "model": "desigo cc info center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.1"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.1.3"
      },
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "9.1\\(1\\)"
      },
      {
        "_id": null,
        "model": "business process automation",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.000.115"
      },
      {
        "_id": null,
        "model": "crosswork network automation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0.0"
      },
      {
        "_id": null,
        "model": "capital",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2019.1"
      },
      {
        "_id": null,
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "11.0"
      },
      {
        "_id": null,
        "model": "emergency responder",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(4.65000.14\\)"
      },
      {
        "_id": null,
        "model": "video surveillance manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.14\\(2.26\\)"
      },
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.1"
      },
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.5"
      },
      {
        "_id": null,
        "model": "6bk1602-0aa32-0tp0",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7.0"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.009\\(000.000\\)"
      },
      {
        "_id": null,
        "model": "network assurance engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.0\\(2.1912\\)"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.4\\(1\\)"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.4.0"
      },
      {
        "_id": null,
        "model": "enterprise chat and email",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "video surveillance operations manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.14.4"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.7.0"
      },
      {
        "_id": null,
        "model": "spectrum power 7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.30"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.0.0"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "vesys",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2020.1"
      },
      {
        "_id": null,
        "model": "unified contact center enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(2\\)"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1h\\)"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.2.2"
      },
      {
        "_id": null,
        "model": "vesys",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2019.1"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.009\\(000.002\\)"
      },
      {
        "_id": null,
        "model": "fog director",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.0.1"
      },
      {
        "_id": null,
        "model": "comos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "10.4.2"
      },
      {
        "_id": null,
        "model": "prime service catalog",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.1"
      },
      {
        "_id": null,
        "model": "dna center",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.1.2.8"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "21.3"
      },
      {
        "_id": null,
        "model": "desigo cc advanced reports",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(2\\)"
      },
      {
        "_id": null,
        "model": "ucs central",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1p\\)"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.10.0"
      },
      {
        "_id": null,
        "model": "crosswork network automation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.3"
      },
      {
        "_id": null,
        "model": "mindsphere",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2021-12-16"
      },
      {
        "_id": null,
        "model": "crosswork data gateway",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0"
      },
      {
        "_id": null,
        "model": "desigo cc advanced reports",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.1"
      },
      {
        "_id": null,
        "model": "nexus dashboard",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.1.2"
      },
      {
        "_id": null,
        "model": "desigo cc advanced reports",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "crosswork network controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0"
      },
      {
        "_id": null,
        "model": "cloudcenter suite admin",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.3.1"
      },
      {
        "_id": null,
        "model": "cloudcenter suite",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.3.0"
      },
      {
        "_id": null,
        "model": "sentron powermanager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1"
      },
      {
        "_id": null,
        "model": "unified sip proxy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "010.002\\(000\\)"
      },
      {
        "_id": null,
        "model": "video surveillance manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.14\\(4.018\\)"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.7"
      },
      {
        "_id": null,
        "model": "e-car operation center",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2021-12-13"
      },
      {
        "_id": null,
        "model": "unified contact center enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6\\(2\\)"
      },
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1f\\)"
      },
      {
        "_id": null,
        "model": "connected mobile experiences",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.5.1.1"
      },
      {
        "_id": null,
        "model": "spectrum power 4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.70"
      },
      {
        "_id": null,
        "model": "unified communications manager im and presence service",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "network assurance engine",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.0.2"
      },
      {
        "_id": null,
        "model": "brocade san navigator",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "integrated management controller supervisor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.003\\(002.000\\)"
      },
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "8.4\\(1\\)"
      },
      {
        "_id": null,
        "model": "xcode",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "13.3"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.18119.2\\)"
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1b\\)"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.004\\(000.914\\)"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.6.1"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.2.1"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.3.4.1"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.18900.97\\)"
      },
      {
        "_id": null,
        "model": "snapcenter",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.4"
      },
      {
        "_id": null,
        "model": "webex meetings server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "dna center",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.2.8"
      },
      {
        "_id": null,
        "model": "synchro",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "bentley",
        "version": "6.2.4.2"
      },
      {
        "_id": null,
        "model": "packaged contact center enterprise",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.5.0"
      },
      {
        "_id": null,
        "model": "webex meetings server",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "8.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "6bk1602-0aa12-0tp0",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7.0"
      },
      {
        "_id": null,
        "model": "desigo cc advanced reports",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1"
      },
      {
        "_id": null,
        "model": "cyber vision sensor management extension",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.3"
      },
      {
        "_id": null,
        "model": "cloud secure agent",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "crosswork platform infrastructure",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1.0"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.4"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.6.0"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.007\\(000.356\\)"
      },
      {
        "_id": null,
        "model": "unified communications manager im \\\u0026 presence service",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.5"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.2.3"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.4"
      },
      {
        "_id": null,
        "model": "vm access proxy",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "snowsoftware",
        "version": "3.6"
      },
      {
        "_id": null,
        "model": "intersight virtual appliance",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.0.9-343"
      },
      {
        "_id": null,
        "model": "data center network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.3\\(1\\)"
      },
      {
        "_id": null,
        "model": "6bk1602-0aa22-0tp0",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7.0"
      },
      {
        "_id": null,
        "model": "oncommand insight",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.4.0"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.6"
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.4.0"
      },
      {
        "_id": null,
        "model": "industrial edge management",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "virtual topology system",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.6.7"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "9.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "unified computing system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "006.008\\(001.000\\)"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1c\\)"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.6.3.1"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.4.0"
      },
      {
        "_id": null,
        "model": "unified sip proxy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "010.002\\(001\\)"
      },
      {
        "_id": null,
        "model": "ontap tools",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.1.0"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.3.0"
      },
      {
        "_id": null,
        "model": "cloudcenter",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.10.0.16"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.006\\(000.156\\)"
      },
      {
        "_id": null,
        "model": "virtualized voice browser",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.2.3"
      },
      {
        "_id": null,
        "model": "oneapi sample browser",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": null
      },
      {
        "_id": null,
        "model": "sentron powermanager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.2"
      },
      {
        "_id": null,
        "model": "cloudcenter cost optimizer",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.5.2"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(3\\)"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.8"
      },
      {
        "_id": null,
        "model": "mendix",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1d\\)"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1g\\)"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "9.0\\(2\\)"
      },
      {
        "_id": null,
        "model": "crosswork zero touch provisioning",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0.1"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.009\\(001.000\\)"
      },
      {
        "_id": null,
        "model": "enterprise chat and email",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.4.2.1"
      },
      {
        "_id": null,
        "model": "opcenter intelligence",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.2"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.010\\(000.000\\)"
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.12.2"
      },
      {
        "_id": null,
        "model": "dna center",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.3.0"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.2.1"
      },
      {
        "_id": null,
        "model": "crosswork data gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0.2"
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6"
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "35"
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.0"
      },
      {
        "_id": null,
        "model": "unified communications manager im \\\u0026 presence service",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.22900.6\\)"
      },
      {
        "_id": null,
        "model": "unified communications manager im and presence service",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.3"
      },
      {
        "_id": null,
        "model": "sppa-t3000 ses3000",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "cx cloud agent",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "001.012"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.10.0.1"
      },
      {
        "_id": null,
        "model": "desigo cc advanced reports",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.2"
      },
      {
        "_id": null,
        "model": "enterprise chat and email",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "integrated management controller supervisor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.3.2.0"
      },
      {
        "_id": null,
        "model": "unified sip proxy",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "10.2.1v2"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.4.5.2"
      },
      {
        "_id": null,
        "model": "iot operations dashboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "ucs director",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.8.2.0"
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.3.1"
      },
      {
        "_id": null,
        "model": "capital",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2019.1"
      },
      {
        "_id": null,
        "model": "crosswork platform infrastructure",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.1"
      },
      {
        "_id": null,
        "model": "cyber vision",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.2"
      },
      {
        "_id": null,
        "model": "siveillance vantage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "unified sip proxy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "010.000\\(000\\)"
      },
      {
        "_id": null,
        "model": "optical network controller",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.1.0"
      },
      {
        "_id": null,
        "model": "solidfire \\\u0026 hci storage node",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "dna center",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.2.0"
      },
      {
        "_id": null,
        "model": "email security",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "sonicwall",
        "version": "10.0.13"
      },
      {
        "_id": null,
        "model": "crosswork network automation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1.1"
      },
      {
        "_id": null,
        "model": "unified contact center enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "enterprise chat and email",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "energyip",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "8.7"
      },
      {
        "_id": null,
        "model": "crosswork optimization engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0"
      },
      {
        "_id": null,
        "model": "synchro",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "bentley",
        "version": "6.1"
      },
      {
        "_id": null,
        "model": "dna center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.2.8"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.1\\(1\\)"
      },
      {
        "_id": null,
        "model": "nx",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "datacenter manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "intel",
        "version": "5.1"
      },
      {
        "_id": null,
        "model": "navigator",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2021-12-13"
      },
      {
        "_id": null,
        "model": "video surveillance manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.14\\(1.26\\)"
      },
      {
        "_id": null,
        "model": "prime service catalog",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.1"
      },
      {
        "_id": null,
        "model": "energyip prepay",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.8.0.12"
      },
      {
        "_id": null,
        "model": "business process automation",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.2.000.000"
      },
      {
        "_id": null,
        "model": "gma-manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "8.6.2j-398"
      },
      {
        "_id": null,
        "model": "unified intelligence center",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "mobility services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "broadworks",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.4"
      },
      {
        "_id": null,
        "model": "unified contact center express",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.5"
      },
      {
        "_id": null,
        "model": "unified intelligence center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(2\\)"
      },
      {
        "_id": null,
        "model": "energyip",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "8.5"
      },
      {
        "_id": null,
        "model": "synchro 4d",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "bentley",
        "version": "6.4.3.2"
      },
      {
        "_id": null,
        "model": "unified contact center enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "data center network manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.3\\(1\\)"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.7.0"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.0.0"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.009\\(001.002\\)"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.6"
      },
      {
        "_id": null,
        "model": "desigo cc advanced reports",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "spectrum power 4",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.70"
      },
      {
        "_id": null,
        "model": "cloud connect",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "cloudcenter suite",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.4.1"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.2\\(1\\)"
      },
      {
        "_id": null,
        "model": "siguard dsa",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.2"
      },
      {
        "_id": null,
        "model": "vesys",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2021.1"
      },
      {
        "_id": null,
        "model": "siguard dsa",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.4.1"
      },
      {
        "_id": null,
        "model": "finesse",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "advanced malware protection virtual private cloud appliance",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.5.4"
      },
      {
        "_id": null,
        "model": "unified contact center enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "solidfire enterprise sds",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "energy engage",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1"
      },
      {
        "_id": null,
        "model": "unified contact center express",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "siveillance identity",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "1.5"
      },
      {
        "_id": null,
        "model": "unified contact center enterprise",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6\\(2\\)"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1e\\)"
      },
      {
        "_id": null,
        "model": "computer vision annotation tool",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": null
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "snow commander",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "snowsoftware",
        "version": "8.10.0"
      },
      {
        "_id": null,
        "model": "cloud insights",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "crosswork optimization engine",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0.1"
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.0"
      },
      {
        "_id": null,
        "model": "emergency responder",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(4.66000.14\\)"
      },
      {
        "_id": null,
        "model": "genomics kernel library",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": null
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5"
      },
      {
        "_id": null,
        "model": "cyber vision sensor management extension",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.2"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.21900.40\\)"
      },
      {
        "_id": null,
        "model": "network insights for data center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.0\\(2.1914\\)"
      },
      {
        "_id": null,
        "model": "automated subsea tuning",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.1.0"
      },
      {
        "_id": null,
        "model": "finesse",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "003.001\\(000.518\\)"
      },
      {
        "_id": null,
        "model": "xpedition package integrator",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "_id": null,
        "model": "optical network controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.1"
      },
      {
        "_id": null,
        "model": "energyip",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "8.6"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.22900.28\\)"
      },
      {
        "_id": null,
        "model": "secure device onboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": null
      },
      {
        "_id": null,
        "model": "unified workforce optimization",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "siveillance viewpoint",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "industrial edge management hub",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2021-12-13"
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "solid edge harness design",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2020"
      },
      {
        "_id": null,
        "model": "contact center domain manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "dna spaces",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.13.0"
      },
      {
        "_id": null,
        "model": "intersight virtual appliance",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.0.9-361"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.6.0"
      },
      {
        "_id": null,
        "model": "virtualized infrastructure manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.4.0"
      },
      {
        "_id": null,
        "model": "virtual topology system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.6.6"
      },
      {
        "_id": null,
        "model": "unified customer voice portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "spectrum power 7",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.30"
      },
      {
        "_id": null,
        "model": "crosswork zero touch provisioning",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0"
      },
      {
        "_id": null,
        "model": "contact center management portal",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.5.4.1"
      },
      {
        "_id": null,
        "model": "6bk1602-0aa52-0tp0",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7.0"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.9.1.3"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "14.0\\(1\\)"
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "34"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.6"
      },
      {
        "_id": null,
        "model": "crosswork network automation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0"
      },
      {
        "_id": null,
        "model": "network dashboard fabric controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.3\\(1\\)"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.2.1"
      },
      {
        "_id": null,
        "model": "broadworks",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2021.11_1.162"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "003.000\\(000.458\\)"
      },
      {
        "_id": null,
        "model": "siveillance command",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.16.2.1"
      },
      {
        "_id": null,
        "model": "firepower threat defense",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.1.0"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "003.002\\(000.116\\)"
      },
      {
        "_id": null,
        "model": "unified contact center management portal",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "operation scheduler",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "1.1.3"
      },
      {
        "_id": null,
        "model": "active iq unified manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "vesys",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2019.1"
      },
      {
        "_id": null,
        "model": "emergency responder",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(4\\)"
      },
      {
        "_id": null,
        "model": "logo\\! soft comfort",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "10.0"
      },
      {
        "_id": null,
        "model": "emergency responder",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5"
      },
      {
        "_id": null,
        "model": "crosswork network automation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1.0"
      },
      {
        "_id": null,
        "model": "packaged contact center enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "dna spaces\\: connector",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.5"
      },
      {
        "_id": null,
        "model": "solid edge cam pro",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "business process automation",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.000.044"
      },
      {
        "_id": null,
        "model": "smart phy",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.2"
      },
      {
        "_id": null,
        "model": "energyip",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "virtualized infrastructure manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.4.4"
      },
      {
        "_id": null,
        "model": "unified contact center express",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(2\\)"
      },
      {
        "_id": null,
        "model": "cloud manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "head-end system universal device integration system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.5.0"
      },
      {
        "_id": null,
        "model": "crosswork network controller",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0.1"
      },
      {
        "_id": null,
        "model": "unity connection",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "8.3\\(1\\)"
      },
      {
        "_id": null,
        "model": "nexus insights",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.0.2"
      },
      {
        "_id": null,
        "model": "webex meetings server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "business process automation",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.2.000.009"
      },
      {
        "_id": null,
        "model": "unity connection",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1.10000.6\\)"
      },
      {
        "_id": null,
        "model": "system studio",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": null
      },
      {
        "_id": null,
        "model": "evolved programmable network manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "siveillance control pro",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.5"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0"
      },
      {
        "_id": null,
        "model": "unified communications manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5\\(1\\)su3"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.4"
      },
      {
        "_id": null,
        "model": "cloudcenter suite",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.5.0"
      },
      {
        "_id": null,
        "model": "log4j",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.15.0"
      },
      {
        "_id": null,
        "model": "unified intelligence center",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "unity connection",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "11.5"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.3.0"
      },
      {
        "_id": null,
        "model": "cloudcenter suite",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.10.0.15"
      },
      {
        "_id": null,
        "model": "siveillance identity",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "1.6"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1a\\)"
      },
      {
        "_id": null,
        "model": "opcenter intelligence",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.5"
      },
      {
        "_id": null,
        "model": "cloudcenter workload manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.5.2"
      },
      {
        "_id": null,
        "model": "fxos",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "6.2.3"
      },
      {
        "_id": null,
        "model": "business process automation",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.000.000"
      },
      {
        "_id": null,
        "model": "identity services engine",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.4.0"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.6"
      },
      {
        "_id": null,
        "model": "sd-wan vmanage",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "20.6.2.1"
      },
      {
        "_id": null,
        "model": "solid edge harness design",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2020"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1k\\)"
      },
      {
        "_id": null,
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "wan automation engine",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.3.0.2"
      },
      {
        "_id": null,
        "model": "network services orchestrator",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "5.3.5.1"
      },
      {
        "_id": null,
        "model": "video surveillance manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "7.14\\(3.025\\)"
      },
      {
        "_id": null,
        "model": "teamcenter",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "_id": null,
        "model": "xpedition enterprise",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "_id": null,
        "model": "dna center",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.3.4"
      },
      {
        "_id": null,
        "model": "workload optimization manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.2.1"
      },
      {
        "_id": null,
        "model": "sipass integrated",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.85"
      },
      {
        "_id": null,
        "model": "ucs central software",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0\\(1l\\)"
      },
      {
        "_id": null,
        "model": "dna spaces connector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "_id": null,
        "model": "finesse",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.6\\(1\\)"
      },
      {
        "_id": null,
        "model": "common services platform collector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "002.009\\(000.001\\)"
      },
      {
        "_id": null,
        "model": "rhythmyx",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "percussion",
        "version": "7.3.2"
      },
      {
        "_id": null,
        "model": "paging server",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "14.4.1"
      },
      {
        "_id": null,
        "model": "unified contact center express",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.5\\(1\\)"
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Much of the content of this vulnerability note is derived from Apache Log4j Security Vulnerabilities and http://slf4j.org/log4shell.html.This document was written by Art Manion.",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#930724"
      }
    ],
    "trust": 0.8
  },
  "cve": "CVE-2021-44228",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2021-44228",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.1,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "VHN-407408",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 4.9,
            "id": "VHN-408570",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2021-44228",
            "impactScore": 6.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "trust": 2.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2021-44228",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "id": "CVE-2021-44228",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-407408",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-408570",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2021-44228",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-44228"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects. Apache Log4j allows insecure JNDI lookups that could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the vulnerable Java application using Log4j.CVE-2021-4104 Affected\nCVE-2021-44228 Affected\nCVE-2021-45046 AffectedCVE-2021-4104 Affected\nCVE-2021-44228 Affected\nCVE-2021-45046 Affected. Apache Log4j is a Java-based open source logging tool of the Apache Foundation. Apache log4j2 has a denial of service vulnerability. When improperly configured, an attacker can exploit this vulnerability to cause a denial of service attack. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n====================================================================                   \nRed Hat Security Advisory\n\nSynopsis:          Critical: Red Hat AMQ Streams 1.8.4 release and security update\nAdvisory ID:       RHSA-2021:5138-01\nProduct:           Red Hat JBoss AMQ\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2021:5138\nIssue date:        2021-12-14\nCVE Names:         CVE-2021-44228\n====================================================================\n1. Summary:\n\nRed Hat AMQ Streams 1.8.4 is now available from the Red Hat Customer\nPortal. \n\nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Description:\n\nRed Hat AMQ Streams, based on the Apache Kafka project, offers a\ndistributed backbone that allows microservices and other applications to\nshare data with extremely high throughput and extremely low latency. \n\nThis release of Red Hat AMQ Streams 1.8.4 serves as a replacement for Red\nHat AMQ Streams 1.8.0, and includes security and bug fixes, and\nenhancements. \n\nSecurity Fix(es):\n\n* log4j-core: Remote code execution in Log4j 2.x when logs contain an\nattacker-controlled string value (CVE-2021-44228)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n3. Solution:\n\nBefore applying the update, back up your existing installation, including\nall applications, configuration files, databases and database settings, and\nso on. \n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). \n\n4. Bugs fixed (https://bugzilla.redhat.com/):\n\n2030932 - CVE-2021-44228 log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value\n\n5. References:\n\nhttps://access.redhat.com/security/cve/CVE-2021-44228\nhttps://access.redhat.com/security/updates/classification/#critical\nhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.streams\u0026version=1.8.4\nhttps://access.redhat.com/security/vulnerabilities/RHSB-2021-009\n\n6. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2021 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nVjWNTjjcyI4=rLTN\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. Summary:\n\nAn update is now available for OpenShift Logging 5.1. Solution:\n\nFor OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nFor Red Hat OpenShift Logging 5.1, see the following instructions to apply\nthis update:\n\nhttps://docs.openshift.com/container-platform/4.8/logging/cluster-logging-upgrading.html\n\n4. JIRA issues fixed (https://issues.jboss.org/):\n\nLOG-1971 - Applying cluster state is causing elasticsearch to hit an issue and become unusable\n\n6. Description:\n\nRed Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments. \n\n2021-12-11: VMSA-2021-0028.1\nUpdated advisory with workaround information for multiple products including vCenter Server Appliance, vRealize Operations, Horizon, vRealize Log Insight, Unified Access Gateway. \n\n2021-12-13: VMSA-2021-0028.2\nRevised advisory with updates to multiple products. \n\\x95\tVMware HCX\n\\x95\tVMware NSX-T Data Center\n\\x95\tVMware WorkspaceOne Access\n\\x95\tVMware Identity Manager \n\\x95\tVMware vRealize Operations Cloud Proxy\n\\x95\tVMware vRealize Lifecycle Manager\n\\x95\tVMware Site Recovery Manager, vSphere Replication\n\\x95\tVMware Carbon Black Cloud Workload Appliance\n\\x95\tVMware Carbon Black EDR Server\n\\x95\tVMware Tanzu GemFire\n\\x95\tVMware Tanzu Greenplum\n\\x95\tVMware Tanzu Operations Manager\n\\x95\tVMware Tanzu Application Service for VMs\n\\x95\tVMware Tanzu Kubernetes Grid Integrated Edition\n\\x95\tVMware Tanzu Observability by Wavefront Nozzle\n\\x95\tHealthwatch for Tanzu Application Service\n\\x95\tSpring Cloud Services for VMware Tanzu\n\\x95\tAPI Portal for VMware Tanzu\n\\x95\tSingle Sign-On for VMware Tanzu Application Service\n\\x95\tApp Metrics\n\\x95\tVMware vCenter Cloud Gateway\n\\x95\tVMware Cloud Foundation\n\\x95\tVMware Workspace ONE Access Connector\n\\x95\tVMware Horizon DaaS\n\\x95\tVMware Horizon Cloud Connector\n\\x95\tVMware NSX Data Center for vSphere\n\\x95\tVMware AppDefense Appliance\n\\x95\tVMware Cloud Director Object Storage Extension\n\nYou are receiving this alert because you are subscribed to the VMware Security Announcements mailing list. To modify your subscription or unsubscribe please visit https://lists.vmware.com/mailman/listinfo/security-announce",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      },
      {
        "db": "CERT/CC",
        "id": "VU#930724"
      },
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-44228"
      },
      {
        "db": "PACKETSTORM",
        "id": "165295"
      },
      {
        "db": "PACKETSTORM",
        "id": "165286"
      },
      {
        "db": "PACKETSTORM",
        "id": "165343"
      },
      {
        "db": "PACKETSTORM",
        "id": "165260"
      }
    ],
    "trust": 2.25
  },
  "exploit_availability": {
    "_id": null,
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-407408",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      }
    ]
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2021-44228",
        "trust": 2.5
      },
      {
        "db": "CERT/CC",
        "id": "VU#930724",
        "trust": 2.0
      },
      {
        "db": "PACKETSTORM",
        "id": "165260",
        "trust": 1.2
      },
      {
        "db": "SIEMENS",
        "id": "SSA-479842",
        "trust": 1.2
      },
      {
        "db": "SIEMENS",
        "id": "SSA-714170",
        "trust": 1.2
      },
      {
        "db": "SIEMENS",
        "id": "SSA-661247",
        "trust": 1.2
      },
      {
        "db": "SIEMENS",
        "id": "SSA-397453",
        "trust": 1.2
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/14/4",
        "trust": 1.2
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/15/3",
        "trust": 1.2
      },
      {
        "db": "PACKETSTORM",
        "id": "165311",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165225",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165532",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165281",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165306",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165673",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165282",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165371",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "167794",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "167917",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165270",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165261",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165642",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165307",
        "trust": 1.1
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/13/1",
        "trust": 1.1
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/10/3",
        "trust": 1.1
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/13/2",
        "trust": 1.1
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/10/2",
        "trust": 1.1
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/10/1",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "171626",
        "trust": 1.0
      },
      {
        "db": "PACKETSTORM",
        "id": "165343",
        "trust": 0.3
      },
      {
        "db": "PACKETSTORM",
        "id": "165329",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "165333",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "165295",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "165326",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "165632",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "165293",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165324",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165520",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165285",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165290",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165291",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165733",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166313",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165279",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165297",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165298",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165289",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165348",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165264",
        "trust": 0.1
      },
      {
        "db": "EXPLOIT-DB",
        "id": "50592",
        "trust": 0.1
      },
      {
        "db": "EXPLOIT-DB",
        "id": "50590",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-407408",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165637",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165649",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165636",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165650",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165645",
        "trust": 0.1
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/12/18/1",
        "trust": 0.1
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-01776",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-44228",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "165286",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#930724"
      },
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-44228"
      },
      {
        "db": "PACKETSTORM",
        "id": "165295"
      },
      {
        "db": "PACKETSTORM",
        "id": "165286"
      },
      {
        "db": "PACKETSTORM",
        "id": "165343"
      },
      {
        "db": "PACKETSTORM",
        "id": "165260"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      }
    ]
  },
  "id": "VAR-202112-0566",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570"
      }
    ],
    "trust": 0.7961849514285715
  },
  "last_update_date": "2026-03-09T23:19:31.555000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Debian CVElist Bug Report Logs: apache-log4j2: CVE-2021-44228: Remote code injection via crafted log messages",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=4eae9b09b97da57f4ca6103cc85ed4da"
      },
      {
        "title": "Debian CVElist Bug Report Logs: apache-log4j2: CVE-2021-45046: Incomplete fix for CVE-2021-44228 in certain non-default configurations",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=b88a8ce4fc53c3a45830bc6bbde8b01c"
      },
      {
        "title": "Debian Security Advisories: DSA-5020-1 apache-log4j2 -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=24c79c59809a2c5bcddc81889b23a6bc"
      },
      {
        "title": "Debian Security Advisories: DSA-5022-1 apache-log4j2 -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=5ba53229ef5f408ed29126bd4f624def"
      },
      {
        "title": "IBM: Security Bulletin: There is vulnerability in Apache Log4j used by Content Manager OnDemand z/OS. Content Manager OnDemand z/OS has addressed the applicable CVE [CVE-2021-44228]",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=dbdfcf9d51b60adf542d500e515b9ba8"
      },
      {
        "title": "Red Hat: CVE-2021-44228",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=CVE-2021-44228"
      },
      {
        "title": "IBM: An update on the Apache Log4j 2.x vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=0648a3f00f067d373b069c4f2acd5db4"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2021-1553",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=ALAS-2021-1553"
      },
      {
        "title": "IBM: Security Bulletin: IBM Cloud Pak System is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-45046, CVE-2021-44228)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=c8b40ff47e1d31bee8b0fbdbdd4fe212"
      },
      {
        "title": "IBM: Security Bulletin: IBM Cloud Pak System is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-45046, CVE-2021-44228)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=654a4f5a7bd1fdfd229558535923710b"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2021-1731",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALAS2-2021-1731"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2021-1730",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALAS2-2021-1730"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=CVE-2021-44228 log"
      },
      {
        "title": "",
        "trust": 0.1,
        "url": "https://github.com/canarieids/Zeek-Ubuntu-22.04 "
      },
      {
        "title": "",
        "trust": 0.1,
        "url": "https://github.com/f5devcentral/f5-professional-services "
      },
      {
        "title": "Log4J-CVE-2021-44228-Mitigation-Cheat-Sheet",
        "trust": 0.1,
        "url": "https://github.com/thedevappsecguy/Log4J-CVE-2021-44228-Mitigation-Cheat-Sheet "
      },
      {
        "title": "spring-on-k8s",
        "trust": 0.1,
        "url": "https://github.com/AndriyKalashnykov/spring-on-k8s "
      },
      {
        "title": "jaygooby",
        "trust": 0.1,
        "url": "https://github.com/jaygooby/jaygooby "
      },
      {
        "title": "log4j-log4shell-playground",
        "trust": 0.1,
        "url": "https://github.com/rgl/log4j-log4shell-playground "
      },
      {
        "title": "Log4j",
        "trust": 0.1,
        "url": "https://github.com/kaganoglu/Log4j "
      },
      {
        "title": "trivy-cve-scan",
        "trust": 0.1,
        "url": "https://github.com/broadinstitute/trivy-cve-scan "
      },
      {
        "title": "test-44228",
        "trust": 0.1,
        "url": "https://github.com/datadavev/test-44228 "
      },
      {
        "title": "cve-2021-44228-helpers",
        "trust": 0.1,
        "url": "https://github.com/uint0/cve-2021-44228-helpers "
      },
      {
        "title": "log4j-vendor-list",
        "trust": 0.1,
        "url": "https://github.com/bizzarecontacts/log4j-vendor-list "
      },
      {
        "title": "",
        "trust": 0.1,
        "url": "https://github.com/Live-Hack-CVE/CVE-2021-44228 "
      },
      {
        "title": "log4shell",
        "trust": 0.1,
        "url": "https://github.com/0xsyr0/log4shell "
      },
      {
        "title": "cve-2021-44228-qingteng-online-patch",
        "trust": 0.1,
        "url": "https://github.com/qingtengyun/cve-2021-44228-qingteng-online-patch "
      },
      {
        "title": "cve-2021-44228",
        "trust": 0.1,
        "url": "https://github.com/corelight/cve-2021-44228 "
      },
      {
        "title": "Log4Shell-IOCs",
        "trust": 0.1,
        "url": "https://github.com/curated-intel/Log4Shell-IOCs "
      },
      {
        "title": "Sitecore.Solr-log4j-mitigation",
        "trust": 0.1,
        "url": "https://github.com/avwolferen/Sitecore.Solr-log4j-mitigation "
      },
      {
        "title": "check-log4j",
        "trust": 0.1,
        "url": "https://github.com/yahoo/check-log4j "
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2021-44228"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-502",
        "trust": 1.2
      },
      {
        "problemtype": "CWE-20",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-400",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-917",
        "trust": 1.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 1.2,
        "url": "https://www.kb.cert.org/vuls/id/930724"
      },
      {
        "trust": 1.2,
        "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-apache-log4j-qruknebd"
      },
      {
        "trust": 1.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf"
      },
      {
        "trust": 1.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf"
      },
      {
        "trust": 1.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"
      },
      {
        "trust": 1.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
      },
      {
        "trust": 1.2,
        "url": "https://psirt.global.sonicwall.com/vuln-detail/snwlid-2021-0032"
      },
      {
        "trust": 1.2,
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"
      },
      {
        "trust": 1.2,
        "url": "https://logging.apache.org/log4j/2.x/security.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
      },
      {
        "trust": 1.2,
        "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
      },
      {
        "trust": 1.2,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/14/4"
      },
      {
        "trust": 1.2,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/15/3"
      },
      {
        "trust": 1.1,
        "url": "https://security.netapp.com/advisory/ntap-20211210-0007/"
      },
      {
        "trust": 1.1,
        "url": "https://support.apple.com/kb/ht213189"
      },
      {
        "trust": 1.1,
        "url": "https://www.debian.org/security/2021/dsa-5020"
      },
      {
        "trust": 1.1,
        "url": "http://seclists.org/fulldisclosure/2022/mar/23"
      },
      {
        "trust": 1.1,
        "url": "http://seclists.org/fulldisclosure/2022/jul/11"
      },
      {
        "trust": 1.1,
        "url": "http://seclists.org/fulldisclosure/2022/dec/2"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/167794/open-xchange-app-suite-7.10.x-cross-site-scripting-command-injection.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/167917/mobileiron-log4shell-remote-command-execution.html"
      },
      {
        "trust": 1.1,
        "url": "https://github.com/nu11secur1ty/cve-mitre/tree/main/cve-2021-44228"
      },
      {
        "trust": 1.1,
        "url": "https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165225/apache-log4j2-2.14.1-remote-code-execution.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165260/vmware-security-advisory-2021-0028.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165261/apache-log4j2-2.14.1-information-disclosure.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165270/apache-log4j2-2.14.1-remote-code-execution.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165281/log4j2-log4shell-regexes.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165282/log4j-payload-generator.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165306/l4sh-log4j-remote-code-execution.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165307/log4j-remote-code-execution-word-bypassing.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165311/log4j-scan-extensive-scanner.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165371/vmware-security-advisory-2021-0028.4.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165532/log4shell-http-header-injection.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165642/vmware-vcenter-server-unauthenticated-log4shell-jndi-injection-remote-code-execution.html"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/165673/unifi-network-application-unauthenticated-log4shell-remote-code-execution.html"
      },
      {
        "trust": 1.1,
        "url": "https://github.com/cisagov/log4j-affected-db"
      },
      {
        "trust": 1.1,
        "url": "https://github.com/cisagov/log4j-affected-db/blob/develop/software-list.md"
      },
      {
        "trust": 1.1,
        "url": "https://twitter.com/kurtseifried/status/1469345530182455296"
      },
      {
        "trust": 1.1,
        "url": "https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001"
      },
      {
        "trust": 1.1,
        "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html"
      },
      {
        "trust": 1.1,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/10/1"
      },
      {
        "trust": 1.1,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/10/2"
      },
      {
        "trust": 1.1,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/10/3"
      },
      {
        "trust": 1.1,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/13/1"
      },
      {
        "trust": 1.1,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/13/2"
      },
      {
        "trust": 1.1,
        "url": "https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/m5csvunv4hwzzxgoknsk6l7rpm7bokib/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/vu57ujdcfiasio35gc55jmksrxjmcdfm/"
      },
      {
        "trust": 1.0,
        "url": "http://packetstormsecurity.com/files/171626/ad-manager-plus-7122-remote-code-execution.html"
      },
      {
        "trust": 1.0,
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=cve-2021-44228"
      },
      {
        "trust": 0.8,
        "url": "cve-2021-4104  "
      },
      {
        "trust": 0.8,
        "url": "cve-2021-44228  "
      },
      {
        "trust": 0.8,
        "url": "cve-2021-45046  "
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/vulnerabilities/rhsb-2021-009"
      },
      {
        "trust": 0.3,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2021-44228"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-44228"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2021-43527"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/m5csvunv4hwzzxgoknsk6l7rpm7bokib/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/vu57ujdcfiasio35gc55jmksrxjmcdfm/"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/2021/dsa-5022"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/eokpqgv24rrbbi4tbzudqmm4meh7mxcy/"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/sig7fzulmnk2xf6fzru4vwydqxnmugaj/"
      },
      {
        "trust": 0.1,
        "url": "https://www.cve.org/cverecord?id=cve-2021-44228"
      },
      {
        "trust": 0.1,
        "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.openwall.com/lists/oss-security/2021/12/18/1"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions\u0026product=jboss.amq.streams\u0026version=1.8.4"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:5138"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-16135"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3200"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-25013"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-25012"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-35522"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-5827"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-35524"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-20673"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-25013"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-25009"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-27645"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-33574"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-13435"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-5827"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-24370"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14145"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-13751"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-25014"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-19603"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14145"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-25012"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-35521"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-35942"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-17594"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-35524"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-24370"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3572"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-12762"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-36086"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3778"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-35522"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-13750"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-13751"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-22898"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-12762"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-16135"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-36084"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-37136"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-17541"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3800"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17594"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-36087"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-36331"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3712"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-31535"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-35523"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-23841"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3445"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-13435"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-19603"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-22925"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:5128"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-20673"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-23840"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-36330"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-18218"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-20232"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-20266"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-20838"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-22876"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-20231"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-36332"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-14155"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-25010"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20838"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-17541"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-25014"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-36085"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-37137"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-21409"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-33560"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-17595"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3481"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-42574"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14155"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-25009"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-25010"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-35523"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-28153"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-13750"
      },
      {
        "trust": 0.1,
        "url": "https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3426"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-18218"
      },
      {
        "trust": 0.1,
        "url": "https://docs.openshift.com/container-platform/4.8/logging/cluster-logging-upgrading.html"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3580"
      },
      {
        "trust": 0.1,
        "url": "https://issues.jboss.org/):"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3796"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17595"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-36330"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-35521"
      },
      {
        "trust": 0.1,
        "url": "https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-43527"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-4104"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:5107"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-45046"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-45046"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-4104"
      },
      {
        "trust": 0.1,
        "url": "https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.vmware.com/security/advisories/vmsa-2021-0028.html"
      },
      {
        "trust": 0.1,
        "url": "http://lists.vmware.com/mailman/listinfo/security-announce"
      },
      {
        "trust": 0.1,
        "url": "https://lists.vmware.com/mailman/listinfo/security-announce."
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#930724"
      },
      {
        "db": "VULHUB",
        "id": "VHN-407408"
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570"
      },
      {
        "db": "PACKETSTORM",
        "id": "165295"
      },
      {
        "db": "PACKETSTORM",
        "id": "165286"
      },
      {
        "db": "PACKETSTORM",
        "id": "165343"
      },
      {
        "db": "PACKETSTORM",
        "id": "165260"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-44228"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#930724",
        "ident": null
      },
      {
        "db": "VULHUB",
        "id": "VHN-407408",
        "ident": null
      },
      {
        "db": "VULHUB",
        "id": "VHN-408570",
        "ident": null
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-44228",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "165295",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "165286",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "165343",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "165260",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2021-44228",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2021-12-15T00:00:00",
        "db": "CERT/CC",
        "id": "VU#930724",
        "ident": null
      },
      {
        "date": "2021-12-10T00:00:00",
        "db": "VULHUB",
        "id": "VHN-407408",
        "ident": null
      },
      {
        "date": "2021-12-14T00:00:00",
        "db": "VULHUB",
        "id": "VHN-408570",
        "ident": null
      },
      {
        "date": "2021-12-10T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-44228",
        "ident": null
      },
      {
        "date": "2021-12-15T15:26:54",
        "db": "PACKETSTORM",
        "id": "165295",
        "ident": null
      },
      {
        "date": "2021-12-15T15:20:33",
        "db": "PACKETSTORM",
        "id": "165286",
        "ident": null
      },
      {
        "date": "2021-12-17T14:05:45",
        "db": "PACKETSTORM",
        "id": "165343",
        "ident": null
      },
      {
        "date": "2021-12-14T15:27:58",
        "db": "PACKETSTORM",
        "id": "165260",
        "ident": null
      },
      {
        "date": "2021-12-10T10:15:09.143000",
        "db": "NVD",
        "id": "CVE-2021-44228",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2022-02-07T00:00:00",
        "db": "CERT/CC",
        "id": "VU#930724",
        "ident": null
      },
      {
        "date": "2023-02-06T00:00:00",
        "db": "VULHUB",
        "id": "VHN-407408",
        "ident": null
      },
      {
        "date": "2022-10-06T00:00:00",
        "db": "VULHUB",
        "id": "VHN-408570",
        "ident": null
      },
      {
        "date": "2023-11-07T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-44228",
        "ident": null
      },
      {
        "date": "2026-02-20T16:15:59.363000",
        "db": "NVD",
        "id": "CVE-2021-44228",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "165260"
      }
    ],
    "trust": 0.1
  },
  "title": {
    "_id": null,
    "data": "Apache Log4j allows insecure JNDI lookups",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#930724"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "code execution",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "165295"
      },
      {
        "db": "PACKETSTORM",
        "id": "165286"
      },
      {
        "db": "PACKETSTORM",
        "id": "165343"
      },
      {
        "db": "PACKETSTORM",
        "id": "165260"
      }
    ],
    "trust": 0.4
  }
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "Apache Log4j is used for logging events in WAGO Smart Script in Version 4.2 and higher.  Events logged by Log4j can contain JNDI references. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Additionally, Log4j does not protect from self-referential lookups, which can lead to Denial of Service.\n\nUPDATE A1/2: \nAffected versions:\n\nCVE-2021-44228 and CVE-2021-45046:\nWAGO Smart Script \u003e= Version 4.2 and \u003c Version 4.8.1.3\n\nCVE-2021-45105:\nWAGO Smart Script \u003e= Version 4.2 and \u003c Version 4.8.1.4\n\nCVE-2021-44832\nWAGO Smart Script \u003e= Version 4.2 and \u003c Version 4.8.1.5\n\nEND UPDATE A1/2",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Log Messages controlled by an attacker could lead to remote code execution. Additionally, Log4j does not protect from self-referential lookups, which can lead to Denial of Service.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Do not use projects from untrusted sources.\nFor further impact information and risk mitigation, see the recommendations of the\n\nApache Foundation https://logging.apache.org/log4j/2.x/security.html\nBundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI) https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2021/211211_log4Shell_WarnstufeRot.html",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "UPDATE A2/2:Install Version 4.8.1.5 or later of WAGO Smart Script, which is available on our Website.Customers using Version 4.6 or higher can already use the integrated \u0027Check for update\u0027 function of WAGO Smart Script to update to Version 4.8.1.5.END UPDATE A2/2",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@wago.com",
      "name": "WAGO GmbH \u0026 Co. KG",
      "namespace": "https://www.wago.com/psirt"
    },
    "references": [
      {
        "category": "external",
        "summary": "WAGO advisory overview at CERT@VDE",
        "url": "https://certvde.com/de/advisories/vendor/wago/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-060: WAGO: Smart Script affected by Log4Shell Vulnerability - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-060"
      },
      {
        "category": "self",
        "summary": "VDE-2021-060: WAGO: Smart Script affected by Log4Shell Vulnerability - CSAF",
        "url": "https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2022/vde-2021-060.json"
      }
    ],
    "title": "WAGO: Smart Script affected by Log4Shell Vulnerability",
    "tracking": {
      "aliases": [
        "VDE-2021-060"
      ],
      "current_release_date": "2025-05-22T13:03:10.000Z",
      "generator": {
        "date": "2025-04-07T13:39:21.363Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.22"
        }
      },
      "id": "VDE-2021-060",
      "initial_release_date": "2022-01-05T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-01-05T07:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "date": "2022-02-09T09:20:00.000Z",
          "number": "2",
          "summary": "Update"
        },
        {
          "date": "2025-05-22T13:03:10.000Z",
          "number": "3",
          "summary": "Fix: added distribution, quotation mark"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "WAGO Smart Script",
                "product": {
                  "name": "WAGO Smart Script",
                  "product_id": "CSAFPID-11001"
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "4.2\u003c4.8.1.4",
                "product": {
                  "name": "Firmware 4.2\u003c4.8.1.4",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "4.8.1.5",
                "product": {
                  "name": "Firmware 4.8.1.5",
                  "product_id": "CSAFPID-22001"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "WAGO"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.2\u003c4.8.1.4 installed on WAGO Smart Script",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.8.1.5 installed on WAGO Smart Script",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-44228",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Do not use projects from untrusted sources.\nFor further impact information and risk mitigation, see the recommendations of the\n\nApache Foundation https://logging.apache.org/log4j/2.x/security.html\nBundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI) https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2021/211211_log4Shell_WarnstufeRot.html",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "UPDATE A2/2:Install Version 4.8.1.5 or later of WAGO Smart Script, which is available on our Website.Customers using Version 4.6 or higher can already use the integrated \u0027Check for update\u0027 function of WAGO Smart Script to update to Version 4.8.1.5.END UPDATE A2/2",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 10,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "temporalScore": 10,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2021-44228"
    },
    {
      "cve": "CVE-2021-45046",
      "cwe": {
        "id": "CWE-917",
        "name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Do not use projects from untrusted sources.\nFor further impact information and risk mitigation, see the recommendations of the\n\nApache Foundation https://logging.apache.org/log4j/2.x/security.html\nBundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI) https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2021/211211_log4Shell_WarnstufeRot.html",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "UPDATE A2/2:Install Version 4.8.1.5 or later of WAGO Smart Script, which is available on our Website.Customers using Version 4.6 or higher can already use the integrated \u0027Check for update\u0027 function of WAGO Smart Script to update to Version 4.8.1.5.END UPDATE A2/2",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.1,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "temporalScore": 9,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2021-45046"
    },
    {
      "cve": "CVE-2021-45105",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Do not use projects from untrusted sources.\nFor further impact information and risk mitigation, see the recommendations of the\n\nApache Foundation https://logging.apache.org/log4j/2.x/security.html\nBundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI) https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2021/211211_log4Shell_WarnstufeRot.html",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "UPDATE A2/2:Install Version 4.8.1.5 or later of WAGO Smart Script, which is available on our Website.Customers using Version 4.6 or higher can already use the integrated \u0027Check for update\u0027 function of WAGO Smart Script to update to Version 4.8.1.5.END UPDATE A2/2",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2021-45105"
    },
    {
      "cve": "CVE-2021-44832",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Do not use projects from untrusted sources.\nFor further impact information and risk mitigation, see the recommendations of the\n\nApache Foundation https://logging.apache.org/log4j/2.x/security.html\nBundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI) https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2021/211211_log4Shell_WarnstufeRot.html",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "UPDATE A2/2:Install Version 4.8.1.5 or later of WAGO Smart Script, which is available on our Website.Customers using Version 4.6 or higher can already use the integrated \u0027Check for update\u0027 function of WAGO Smart Script to update to Version 4.8.1.5.END UPDATE A2/2",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.6,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 6.6,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2021-44832"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apache log4j ist ein Framework zum Loggen von Anwendungsmeldungen in Java.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Appliance\n- CISCO Appliance\n- Hardware Appliance\n- Juniper Appliance\n- Linux\n- Native Hypervisor\n- NetApp Appliance\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0351 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0351.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0351 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0351"
      },
      {
        "category": "external",
        "summary": "Red Hat Bugzilla - Bug 2030932 vom 2021-12-09",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2030932"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-jfh8-c2jp-5v3q vom 2021-12-09",
        "url": "https://github.com/advisories/GHSA-jfh8-c2jp-5v3q"
      },
      {
        "category": "external",
        "summary": "GitHub: CVE-2021-44228 Remote Code Injection In Log4j vom 2021-12-10",
        "url": "https://github.com/jas502n/Log4j2-CVE-2021-44228"
      },
      {
        "category": "external",
        "summary": "Apache log4j Security Advisory vom 2021-12-10",
        "url": "https://logging.apache.org/log4j/2.x/security.html"
      },
      {
        "category": "external",
        "summary": "Tweet von Deutsche Telekom CERT vom 2021-12-10",
        "url": "https://twitter.com/DTCERT/status/1469258597930614787"
      },
      {
        "category": "external",
        "summary": "CERT-EU Security Advisory 2021-067 vom 2021-12-10",
        "url": "https://media.cert.europa.eu/static/SecurityAdvisories/2021/CERT-EU-SA2021-067.pdf"
      },
      {
        "category": "external",
        "summary": "Elastic Security Announcement ESA-2021-31 vom 2021-12-13",
        "url": "https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476"
      },
      {
        "category": "external",
        "summary": "ExtremeNetworks Vulnerability Notice VN-2020-465 vom 2021-12-12",
        "url": "https://extremeportal.force.com/ExtrArticleDetail?an=000100806"
      },
      {
        "category": "external",
        "summary": "VMware Security Advisory VMSA-2021-0028 vom 2021-12-11",
        "url": "https://www.vmware.com/security/advisories/VMSA-2021-0028.html"
      },
      {
        "category": "external",
        "summary": "FortiGuard Labs PSIRT Advisory FG-IR-21-245 vom 2021-12-12",
        "url": "https://www.fortiguard.com/psirt/FG-IR-21-245"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-003 vom 2021-12-11",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2021-003.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6525706 vom 2021-12-13",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-websphere-application-server-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2842 vom 2021-12-12",
        "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory CISCO-SA-APACHE-LOG4J-QRUKNEBD vom 2021-12-10",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0095493 vom 2021-12-13",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095493"
      },
      {
        "category": "external",
        "summary": "Symantec Security Advisory SYMSA19793 vom 2021-12-13",
        "url": "https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Security-Advisory-for-Log4j-2-CVE-2021-44228-Vulnerability/SYMSA19793"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5020 vom 2021-12-12",
        "url": "http://www.debian.org/security/2021/dsa-5020"
      },
      {
        "category": "external",
        "summary": "F-Secure Policy Manager Update vom 2021-12-12",
        "url": "https://status.f-secure.com/incidents/sk8vmr0h34pd"
      },
      {
        "category": "external",
        "summary": "RSA SecurID Authentication Manager Update vom 2021-12-12",
        "url": "https://community.rsa.com/t5/general-security-advisories-and/rsa-customer-advisory-apache-vulnerability-log4j2-cve-2021-44228/ta-p/660501"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2021-12-12",
        "url": "https://www.splunk.com/en_us/blog/bulletins/splunk-security-advisory-for-apache-log4j-cve-2021-44228.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Bulletin RHSB-2021-009 vom 2021-12-13",
        "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2021-009"
      },
      {
        "category": "external",
        "summary": "Apache Kafka Mailing List vom 2021-12-12",
        "url": "https://lists.apache.org/thread/lgbtvvmy68p0059yoyn9qxzosdmx4jdv"
      },
      {
        "category": "external",
        "summary": "Apache Struts Security Advice vom 2021-12-12",
        "url": "https://struts.apache.org/announce-2021#a20211212-2"
      },
      {
        "category": "external",
        "summary": "Oracle Security Alert",
        "url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"
      },
      {
        "category": "external",
        "summary": "Spring.io Blog",
        "url": "https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot"
      },
      {
        "category": "external",
        "summary": "SOS Job Scheduler Vulnerability Release",
        "url": "https://kb.sos-berlin.com/display/PKB/Vulnerability+Release+2.2.0"
      },
      {
        "category": "external",
        "summary": "SOS Job Scheduler Vulnerability Release",
        "url": "https://kb.sos-berlin.com/display/PKB/Vulnerability+Release+1.13.10"
      },
      {
        "category": "external",
        "summary": "SAS Statement Regarding Remote Code Execution Vulnerability (CVE-2021-44228)",
        "url": "https://support.sas.com/content/support/en/security-bulletins/remote-code-execution-vulnerability-cve-2021-44228.html"
      },
      {
        "category": "external",
        "summary": "Sammlung betroffener Produkte auf GitHub (NLD Nationaal Cyber Security Centrum)",
        "url": "https://github.com/NCSC-NL/log4shell/tree/main/software"
      },
      {
        "category": "external",
        "summary": "Talos Intelligence Blog",
        "url": "https://blog.talosintelligence.com/2021/12/apache-log4j-rce-vulnerability.html"
      },
      {
        "category": "external",
        "summary": "Github User \"CronUp\"",
        "url": "https://github.com/CronUp/Malware-IOCs/blob/main/2021-12-11_Log4Shell_Botnets"
      },
      {
        "category": "external",
        "summary": "Atlassian FAQ for CVE-2021-44228 vom 2021-12-12",
        "url": "https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html"
      },
      {
        "category": "external",
        "summary": "Siemens Security Advisory SSA-661247 vom 2021-12-13",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"
      },
      {
        "category": "external",
        "summary": "Unify Security Advisory Report OBSO-2112-01 vom 2021-12-13",
        "url": "https://networks.unify.com/security/advisories/OBSO-2112-01.pdf"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA11259 vom 2021-12-13",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11259\u0026cat=SIRT_1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5094 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5094"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5192-1 vom 2021-12-14",
        "url": "https://ubuntu.com/security/notices/USN-5192-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5140 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5140"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526174 vom 2021-12-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-access-manager-9-0-7-1-and-ibm-security-verify-access-10-0-0-0-may-be-affected-by-the-log4j-vulnerability-cve-2021-44228-2/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5137 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5137"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5138 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5138"
      },
      {
        "category": "external",
        "summary": "WIBU Security Advisory WIBU-211213-01 vom 2021-12-15",
        "url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-211213-01.pdf"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526274 vom 2021-12-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-blockchain-bridge-dependencies-are-vulnerable-to-an-issue-in-apache-log4j-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526174 vom 2021-12-14",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-access-manager-9-0-7-1-and-ibm-security-verify-access-10-0-0-0-may-be-affected-by-the-log4j-vulnerability-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526182 vom 2021-12-14",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5093 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5093"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5108 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5108"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5126 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5126"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5129 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5129"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5132 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5132"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5127 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5127"
      },
      {
        "category": "external",
        "summary": "QNAP Security Advisory QSA-21-58 vom 2021-12-14",
        "url": "https://www.qnap.com/de-de/security-advisory/QSA-21-58"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5128 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5128"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5130 vom 2021-12-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:5130"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5133 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5133"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526184 vom 2021-12-14",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-subscription-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5134 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5134"
      },
      {
        "category": "external",
        "summary": "Apache log4j Security Advisory vom 2021-12-14",
        "url": "https://logging.apache.org/log4j/2.x/security.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527090 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-plus-container-backup-and-restore-for-kubernetes-and-openshift-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527084 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-operations-center-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527088 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-security-access-manager-for-enterprise-single-sign-on-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526640 vom 2021-12-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4j-as-used-in-ibm-qradar-user-behavior-analytics-application-add-on-to-ibm-qradar-siem-is-vulnerable-to-remote-code-execution-rce-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5148 vom 2021-12-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:5148"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0095516 vom 2021-12-16",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095516"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526490 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-a-security-vulnerability-has-been-identified-in-websphere-application-server-shipped-with-ibm-websphere-remote-server-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5197-1 vom 2021-12-15",
        "url": "https://ubuntu.com/security/notices/USN-5197-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4097-1 vom 2021-12-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009912.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5106 vom 2021-12-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:5106"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526462 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-db2-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4096-1 vom 2021-12-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009911.html"
      },
      {
        "category": "external",
        "summary": "SAP Support Center",
        "url": "https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/trust-center/sap-tc-01-5025.pdf"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527080 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-client-web-user-interface-and-ibm-spectrum-protect-for-virtual-environments-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1730 vom 2021-12-16",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1730.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527082 vom 2021-12-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-vulnerable-to-a-remote-code-execution-vulnerability-in-log4j2-component/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5022 vom 2021-12-16",
        "url": "https://lists.debian.org/debian-security-announce/2021/msg00208.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5107 vom 2021-12-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:5107"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5141 vom 2021-12-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:5141"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5186 vom 2021-12-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:5186"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5183 vom 2021-12-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:5183"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5184 vom 2021-12-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:5184"
      },
      {
        "category": "external",
        "summary": "Siemens Security Advisory SSA-714170 vom 2021-12-16",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527372 vom 2021-12-17",
        "url": "https://www.ibm.com/support/pages/node/6527372"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory - Log4j",
        "url": "https://confluence.atlassian.com/security/multiple-products-security-advisory-log4j-vulnerable-to-remote-code-execution-cve-2021-44228-1103069934.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527226 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-db2-on-openshift-and-ibm-db2-and-db2-warehouse-on-cloud-pak-for-data-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527322 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-db2-warehouse-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527096 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4jshell-vulnerability-affects-ibm-spss-modeler-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-147 vom 2021-12-17",
        "url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-147/index.html"
      },
      {
        "category": "external",
        "summary": "Palo Alto Networks Security Advisory PAN-184592 vom 2021-12-17",
        "url": "https://security.paloaltonetworks.com/CVE-2021-44228"
      },
      {
        "category": "external",
        "summary": "Log4j Vulnerabilities Impact On Oracle E-Business Suite Analysis",
        "url": "https://www.integrigy.com/security-resources/log4j-vulnerabilities-impact-oracle-e-business-suite-analysis"
      },
      {
        "category": "external",
        "summary": "Tibco Apache Log4J Vulnerability Daily Update",
        "url": "https://www.tibco.com/support/notices/2021/12/apache-log4j-vulnerability-update-archive-6"
      },
      {
        "category": "external",
        "summary": "Avaya Product Security Apache Log4J Vulnerability vom 2021-12-17",
        "url": "https://support.avaya.com/helpcenter/getGenericDetails?detailId=1399839287609"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527260 vom 2021-12-20",
        "url": "http://www.auscert.org.au/bulletins/ESB-2021.4320"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1731 vom 2021-12-18",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1731.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1553 vom 2021-12-18",
        "url": "https://alas.aws.amazon.com/ALAS-2021-1553.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASCORRETTO8-2021-001 vom 2021-12-20",
        "url": "https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2021-001.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2021-001 vom 2021-12-20",
        "url": "https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2021-001.html"
      },
      {
        "category": "external",
        "summary": "Citrix Security Advisory CTX335705 vom 2021-12-20",
        "url": "https://support.citrix.com/article/CTX335705"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527724 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-collaboration-and-deployment-services-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527824 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-for-space-management-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527824 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-for-space-management-cve-2021-44228-2/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527824 vom 2021-12-19",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-for-space-management-cve-2021-44228-3/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527894 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-snapshot-for-vmware-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527874 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-desktop-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527828 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-plus-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527894 vom 2021-12-19",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-snapshot-for-vmware-cve-2021-44228-2/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527836 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-snapshot-on-windows-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527836 vom 2021-12-19",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-snapshot-on-windows-cve-2021-44228-2/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527962 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerablity-in-apache-log4j-may-affect-ibm-tivoli-monitoring-installed-websphere-application-server-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6528108 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-scale-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527762 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spss-analytic-server-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-004 vom 2021-12-18",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2021-004.html"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0095587 vom 2021-12-17",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095587"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5192-2 vom 2021-12-17",
        "url": "https://ubuntu.com/security/notices/USN-5192-2"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527768 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-apache-log4j-vulnerability-affects-ibm-business-automation-workflow-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527924 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-blockchain-bridge-dependencies-are-vulnerable-to-an-issue-in-apache-log4j-cve-2021-45046/"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20211215-0001 vom 2021-12-20",
        "url": "https://security.netapp.com/advisory/ntap-20211215-0001/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6528432 vom 2021-12-21",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-insights-is-vulnerable-to-a-remote-code-execution-vulnerability-in-apache-log4j-2-component-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20211210-0007 vom 2021-12-20",
        "url": "https://security.netapp.com/advisory/ntap-20211210-0007/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6526420 vom 2021-12-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-websphere-service-registry-and-repository-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527764 vom 2021-12-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-has-been-identified-in-ibm-websphere-application-server-shipped-with-ibm-digital-business-automation-workflow-family-products-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6528846 vom 2021-12-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-tivoli-network-manager-ip-edition-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6528678 vom 2021-12-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-db2-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "Incident Report for F-Secure services",
        "url": "https://status.f-secure.com/incidents/sk8vmr0h34pd"
      },
      {
        "category": "external",
        "summary": "Apache Log4j 2 Release Notes",
        "url": "https://logging.apache.org/log4j/log4j-2.12.3/index.html"
      },
      {
        "category": "external",
        "summary": "Apache Log4j2 Advisory",
        "url": "https://logging.apache.org/log4j/log4j-2.3.1/index.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6536868 vom 2021-12-23",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-have-been-identified-in-apache-log4j-shipped-with-ibm-tivoli-netcool-omnibus-common-integration-libraries-cve-2021-4104-cve-2021-45046-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0095728 vom 2021-12-22",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095728"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6536712 vom 2021-12-23",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-informix-dynamic-server-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527948 vom 2021-12-23",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-netcool-omnibus-8-1-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1732 vom 2021-12-24",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1732.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1554 vom 2021-12-24",
        "url": "https://alas.aws.amazon.com/ALAS-2021-1554.html"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-315 vom 2021-12-28",
        "url": "https://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2021/2021_315.html"
      },
      {
        "category": "external",
        "summary": "EMC Security Advisory DSA-2021-274 vom 2022-01-09",
        "url": "https://www.dell.com/support/kbdoc/de-de/000194503/dsa-2021-274-dell-emc-data-domain-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
      },
      {
        "category": "external",
        "summary": "EMC Security Advisory DSA-2021-309 vom 2022-01-09",
        "url": "https://www.dell.com/support/kbdoc/de-de/000194651/dsa-2021-309-dell-emc-dpa-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
      },
      {
        "category": "external",
        "summary": "EMC Security Advisory DSA-2021-277 vom 2022-01-09",
        "url": "https://www.dell.com/support/kbdoc/de-de/000194480/dsa-2021-277-dell-emc-avamar-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin HPESBGN04215 rev.10 vom 2022-01-08",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbgn04215en_us"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6539444 vom 2022-01-11",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-operational-decision-manager-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "SAP Security Note 3130521 vom 2022-01-11",
        "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0082 vom 2022-01-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:0082"
      },
      {
        "category": "external",
        "summary": "JobScheduler Vulnerability Release 2.2.1 vom 2022-01-11",
        "url": "https://kb.sos-berlin.com/display/PKB/Vulnerability+Release+2.2.1"
      },
      {
        "category": "external",
        "summary": "Juniper Security Bulletin JSA11287 vom 2022-01-12",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11287\u0026cat=SIRT_1"
      },
      {
        "category": "external",
        "summary": "SoapUI Release 5.6.1",
        "url": "https://www.soapui.org/downloads/latest-release/release-history/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6541008 vom 2022-01-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-rational-build-forge-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6541258 vom 2022-01-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-rational-software-architect-realtime-edition-rsa-rt-is-is-vulnerable-to-arbitrary-code-execution-and-denial-of-service-due-to-apache-log4j-cve-2021-44228-cve-2021-45046-and/"
      },
      {
        "category": "external",
        "summary": "Unify Security Advisory Report OBSO-2201-01 vom 2022-01-18",
        "url": "https://networks.unify.com/security/advisories/OBSO-2201-01.pdf"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0203 vom 2022-01-20",
        "url": "https://access.redhat.com/errata/RHSA-2022:0203"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0216 vom 2022-01-20",
        "url": "https://access.redhat.com/errata/RHSA-2022:0216"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0222 vom 2022-01-21",
        "url": "https://access.redhat.com/errata/RHSA-2022:0222"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0205 vom 2022-01-20",
        "url": "https://access.redhat.com/errata/RHSA-2022:0205"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0223 vom 2022-01-21",
        "url": "https://access.redhat.com/errata/RHSA-2022:0223"
      },
      {
        "category": "external",
        "summary": "LibreOffice Security Advisory",
        "url": "https://www.libreoffice.org/about-us/security/advisories/cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0296 vom 2022-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2022:0296"
      },
      {
        "category": "external",
        "summary": "ASC NEO Release Announcement 6.7 vom 2022-01-24",
        "url": "https://www.asc.de/partner/pp_Tech_d.php?Reveal_in_Tree=VW1Wc1pXRnpaU0JCYm01dmRXNWpaVzFsYm5RZ1ptOXlJRzVsYnlCVGRXbDBaU0JXTmk0M0lDd2dOVFEwSUd0Q0xDQXlNREl5TFRBeExUSTArSA=="
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6553622 vom 2022-02-04",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-informix-dynamic-server-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228-3/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6553626 vom 2022-02-04",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4j-vulnerability-cve-2021-44228-in-ibm-informix-dynamic-server-in-cloud-pak-for-data-2/"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097299 vom 2022-03-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097299"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097470 vom 2022-03-25",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097470"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0096807 vom 2022-03-29",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0096807"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097763 vom 2022-04-06",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097763"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1296 vom 2022-04-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:1296"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1299 vom 2022-04-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:1299"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1297 vom 2022-04-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:1297"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2022-1773 vom 2022-04-19",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1773.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1580 vom 2022-04-19",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1580.html"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097650 vom 2022-04-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097650"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097639 vom 2022-04-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097639"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-001 vom 2022-04-25",
        "url": "https://downloads.avaya.com/css/P8/documents/101081576"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097787 vom 2022-04-28",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097787"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097471 vom 2022-05-18",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097471"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1806 vom 2022-06-15",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1806.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1601 vom 2022-06-15",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1601.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6602955 vom 2022-07-13",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-content-manager-ondemand-for-multiplatforms-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099131 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099131"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099671 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099671"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099128 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099128"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099667 vom 2022-08-13",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099667"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099669 vom 2022-08-13",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099669"
      },
      {
        "category": "external",
        "summary": "Kyocera Informationen \u00fcber aktuelle Sicherheitshinweise",
        "url": "https://www.kyoceradocumentsolutions.de/de/support/sicherheitsluecken.html"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0100505 vom 2022-09-21",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0100505"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-225 vom 2022-12-09",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-225.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:1747 vom 2025-02-24",
        "url": "https://access.redhat.com/errata/RHSA-2025:1747"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:1746 vom 2025-02-24",
        "url": "https://access.redhat.com/errata/RHSA-2025:1746"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2021-273 vom 2025-11-05",
        "url": "https://www.dell.com/support/kbdoc/de-de/000194612/dsa-2021-273-dell-emc-ecs-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
      }
    ],
    "source_lang": "en-US",
    "title": "Apache log4j: Schwachstelle erm\u00f6glicht Codeausf\u00fchrung",
    "tracking": {
      "current_release_date": "2025-11-05T23:00:00.000+00:00",
      "generator": {
        "date": "2025-11-06T09:37:06.589+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2022-0351",
      "initial_release_date": "2021-12-09T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-12-09T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-12-12T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Fedora, Elastic, ExtremeNetworks, VMware, Fortinet, Amazon, IBM, Debian, Cisco, HCL und Symantec aufgenommen"
        },
        {
          "date": "2021-12-13T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Siemens, Unify und Juniper aufgenommen"
        },
        {
          "date": "2021-12-14T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu, Red Hat, IBM, WIBU-SYSTEMS, Fedora und QNAP aufgenommen"
        },
        {
          "date": "2021-12-15T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von IBM, Red Hat, HCL, Ubuntu, SUSE und Amazon aufgenommen"
        },
        {
          "date": "2021-12-16T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Avaya, Red Hat, Siemens, IBM, HITACHI und Palo Alto Networks aufgenommen"
        },
        {
          "date": "2021-12-19T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von IBM, Amazon, Citrix, HCL und Ubuntu aufgenommen"
        },
        {
          "date": "2021-12-20T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von NetApp und IBM aufgenommen"
        },
        {
          "date": "2021-12-21T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2021-12-22T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von IBM und HCL aufgenommen"
        },
        {
          "date": "2021-12-23T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2021-12-27T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2022-01-06T23:00:00.000+00:00",
          "number": "13",
          "summary": "Referenz(en) aufgenommen: CSCWA47351, CSCWA52921, CSCWA54650, CSCWA56230"
        },
        {
          "date": "2022-01-09T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von EMC und HP aufgenommen"
        },
        {
          "date": "2022-01-10T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von IBM und SAP aufgenommen"
        },
        {
          "date": "2022-01-11T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-01-12T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Juniper, SmartBear und SOS GmbH aufgenommen"
        },
        {
          "date": "2022-01-16T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-01-17T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-01-18T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Unify aufgenommen"
        },
        {
          "date": "2022-01-19T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-01-20T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-01-23T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-01-26T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat und ASC aufgenommen"
        },
        {
          "date": "2022-02-03T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-03-22T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-03-24T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-03-29T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-04-05T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-04-11T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-04-19T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-04-24T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-04-26T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-04-27T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-05-17T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-06-16T22:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-07-12T22:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-07-24T22:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-08-14T22:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-08-30T22:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-09-20T22:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-12-11T23:00:00.000+00:00",
          "number": "42",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-02-23T23:00:00.000+00:00",
          "number": "43",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-05T23:00:00.000+00:00",
          "number": "44",
          "summary": "Neue Updates von Dell aufgenommen"
        }
      ],
      "status": "final",
      "version": "44"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "ASC NEO",
            "product": {
              "name": "ASC NEO",
              "product_id": "T021878",
              "product_identification_helper": {
                "cpe": "cpe:/a:asc:neo:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "ASC"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Apache Kafka",
            "product": {
              "name": "Apache Kafka",
              "product_id": "T021247",
              "product_identification_helper": {
                "cpe": "cpe:/a:apache:kafka:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Apache Solr",
            "product": {
              "name": "Apache Solr",
              "product_id": "T021248",
              "product_identification_helper": {
                "cpe": "cpe:/a:apache:solr:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Apache Struts",
            "product": {
              "name": "Apache Struts",
              "product_id": "642",
              "product_identification_helper": {
                "cpe": "cpe:/a:apache:struts:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.16.0",
                "product": {
                  "name": "Apache log4j \u003c2.16.0",
                  "product_id": "T021308"
                }
              },
              {
                "category": "product_version",
                "name": "2.16.0",
                "product": {
                  "name": "Apache log4j 2.16.0",
                  "product_id": "T021308-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apache:log4j:2.16.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "log4j"
          }
        ],
        "category": "vendor",
        "name": "Apache"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Atlassian Bamboo",
            "product": {
              "name": "Atlassian Bamboo",
              "product_id": "T021265",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:bamboo:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Atlassian Bitbucket",
            "product": {
              "name": "Atlassian Bitbucket",
              "product_id": "T021356",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:bitbucket:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Atlassian Confluence",
            "product": {
              "name": "Atlassian Confluence",
              "product_id": "T016816",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:confluence:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Atlassian Crucible",
            "product": {
              "name": "Atlassian Crucible",
              "product_id": "T021266",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:crucible:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Atlassian Fisheye",
            "product": {
              "name": "Atlassian Fisheye",
              "product_id": "T021267",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:fisheye:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Atlassian Jira",
            "product": {
              "name": "Atlassian Jira",
              "product_id": "T015027",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:jira_software:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Atlassian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Avaya Analytics",
            "product": {
              "name": "Avaya Analytics",
              "product_id": "T021375",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:analytics:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Application Enablement Services",
            "product": {
              "name": "Avaya Aura Application Enablement Services",
              "product_id": "T015516",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Device Services",
            "product": {
              "name": "Avaya Aura Device Services",
              "product_id": "T015517",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_device_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Experience Portal",
            "product": {
              "name": "Avaya Aura Experience Portal",
              "product_id": "T015519",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_experience_portal:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Media Server",
            "product": {
              "name": "Avaya Aura Media Server",
              "product_id": "1017",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:media_server:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Session Manager",
            "product": {
              "name": "Avaya Aura Session Manager",
              "product_id": "T015127",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:session_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura System Manager",
            "product": {
              "name": "Avaya Aura System Manager",
              "product_id": "T015518",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_system_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Web Gateway",
            "product": {
              "name": "Avaya Aura Web Gateway",
              "product_id": "T021376",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_web_gateway:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Breeze Platform",
            "product": {
              "name": "Avaya Breeze Platform",
              "product_id": "T015823",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:breeze_platform:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Oceana",
            "product": {
              "name": "Avaya Oceana",
              "product_id": "T016589",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:oceana:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Session Border Controller",
            "product": {
              "name": "Avaya Session Border Controller",
              "product_id": "T015520",
              "product_identification_helper": {
                "cpe": "cpe:/h:avaya:session_border_controller:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya one-X",
            "product": {
              "name": "Avaya one-X",
              "product_id": "1024",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:one-x:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Avaya"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco Application Policy Infrastructure Controller",
            "product": {
              "name": "Cisco Application Policy Infrastructure Controller",
              "product_id": "778219",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:application_policy_infrastructure_controller:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Emergency Responder",
            "product": {
              "name": "Cisco Emergency Responder",
              "product_id": "2040",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:emergency_responder:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Finesse",
            "product": {
              "name": "Cisco Finesse",
              "product_id": "199167",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:finesse:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Dashboard",
                "product": {
                  "name": "Cisco Firepower Dashboard",
                  "product_id": "T011337",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cisco:firepower:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Firepower"
          },
          {
            "category": "product_name",
            "name": "Cisco Identity Services Engine (ISE)",
            "product": {
              "name": "Cisco Identity Services Engine (ISE)",
              "product_id": "T000612",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:identity_services_engine_software:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Integrated Management Controller",
            "product": {
              "name": "Cisco Integrated Management Controller",
              "product_id": "T014392",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:integrated_management_controller:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Network Services Orchestrator",
            "product": {
              "name": "Cisco Network Services Orchestrator",
              "product_id": "T021358",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:network_services_orchestrator:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Dashboard",
                "product": {
                  "name": "Cisco Nexus Dashboard",
                  "product_id": "T021249",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:nexus:::dashboard"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Insights",
                "product": {
                  "name": "Cisco Nexus Insights",
                  "product_id": "T021357",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:nexus:insights"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Nexus"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vManage",
                "product": {
                  "name": "Cisco SD-WAN vManage",
                  "product_id": "T018812",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cisco:sd_wan:vmanage"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SD-WAN"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Session Management Edition",
                "product": {
                  "name": "Cisco Unified Communications Manager (CUCM) Session Management Edition",
                  "product_id": "T016315",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cisco:unified_communications_manager:session_management_edition"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Cloud",
                "product": {
                  "name": "Cisco Unified Communications Manager (CUCM) Cloud",
                  "product_id": "T021250",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cisco:unified_communications_manager:::cloud"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Unified Communications Manager (CUCM)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Director",
                "product": {
                  "name": "Cisco Unified Computing System (UCS) Director",
                  "product_id": "T017032",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:unified_computing_system:director_6.7.4.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Central Software",
                "product": {
                  "name": "Cisco Unified Computing System (UCS) Central Software",
                  "product_id": "T021359",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:unified_computing_system:central_software"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Unified Computing System (UCS)"
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Contact Center Enterprise",
            "product": {
              "name": "Cisco Unified Contact Center Enterprise",
              "product_id": "2143",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:unified_contact_center_enterprise:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Contact Center Express (UCCX)",
            "product": {
              "name": "Cisco Unified Contact Center Express (UCCX)",
              "product_id": "915286",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:unified_contact_center_express:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Intelligence Center",
            "product": {
              "name": "Cisco Unified Intelligence Center",
              "product_id": "T018811",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:unified_intelligence_center:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Intelligent Contact Management Enterprise",
            "product": {
              "name": "Cisco Unified Intelligent Contact Management Enterprise",
              "product_id": "69412",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:unified_intelligent_contact_management_enterprise:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unity Connection",
            "product": {
              "name": "Cisco Unity Connection",
              "product_id": "T002044",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:unity_connection:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Video Surveillance Operations Manager",
            "product": {
              "name": "Cisco Video Surveillance Operations Manager",
              "product_id": "196088",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:video_surveillance_operations_manager:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Cloud-Connected UC",
                "product": {
                  "name": "Cisco WebEx Cloud-Connected UC",
                  "product_id": "T021251",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cisco:webex:::cloud-connected_uc"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "WebEx"
          },
          {
            "category": "product_name",
            "name": "Cisco WebEx Meetings Server",
            "product": {
              "name": "Cisco WebEx Meetings Server",
              "product_id": "T001160",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:webex_meetings_server:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Citrix Systems Virtual Apps and Desktops",
            "product": {
              "name": "Citrix Systems Virtual Apps and Desktops",
              "product_id": "876876",
              "product_identification_helper": {
                "cpe": "cpe:/a:citrix:virtual_apps_and_desktops:-::~~-~~~"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Citrix Systems"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Data Protection Advisor",
            "product": {
              "name": "Dell Data Protection Advisor",
              "product_id": "T021498",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:data_protection_advisor:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Dell ECS",
            "product": {
              "name": "Dell ECS",
              "product_id": "T048328",
              "product_identification_helper": {
                "cpe": "cpe:/h:dell:ecs:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "EMC Avamar",
            "product": {
              "name": "EMC Avamar",
              "product_id": "T014381",
              "product_identification_helper": {
                "cpe": "cpe:/a:emc:avamar:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "EMC Data Domain",
            "product": {
              "name": "EMC Data Domain",
              "product_id": "T021496",
              "product_identification_helper": {
                "cpe": "cpe:/o:emc:data_domain:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "EMC Data Domain OS",
            "product": {
              "name": "EMC Data Domain OS",
              "product_id": "T006099",
              "product_identification_helper": {
                "cpe": "cpe:/o:emc:data_domain_os:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "EMC"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "F-Secure Policy Manager",
            "product": {
              "name": "F-Secure Policy Manager",
              "product_id": "T021242",
              "product_identification_helper": {
                "cpe": "cpe:/a:f-secure:policy_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "F-Secure"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HCL Commerce",
            "product": {
              "name": "HCL Commerce",
              "product_id": "T019293",
              "product_identification_helper": {
                "cpe": "cpe:/a:hcltechsw:commerce:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "HCL Domino",
            "product": {
              "name": "HCL Domino",
              "product_id": "777623",
              "product_identification_helper": {
                "cpe": "cpe:/a:hcltech:domino:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Storage",
            "product": {
              "name": "Hitachi Storage",
              "product_id": "T009295",
              "product_identification_helper": {
                "cpe": "cpe:/h:hitachi:storage:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM Business Automation Workflow",
            "product": {
              "name": "IBM Business Automation Workflow",
              "product_id": "T019704",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:business_automation_workflow:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Content Manager",
            "product": {
              "name": "IBM Content Manager",
              "product_id": "T023838",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:content_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM DB2",
            "product": {
              "name": "IBM DB2",
              "product_id": "5104",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:db2:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM InfoSphere Information Server",
            "product": {
              "name": "IBM InfoSphere Information Server",
              "product_id": "T019995",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:infosphere_information_server:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM Informix",
                "product": {
                  "name": "IBM Informix",
                  "product_id": "5121",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:informix:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Dynamic Server",
                "product": {
                  "name": "IBM Informix Dynamic Server",
                  "product_id": "T021953",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:informix:::dynamic_server"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Informix"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "9.1",
                "product": {
                  "name": "IBM MQ 9.1",
                  "product_id": "T014765",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:9.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9.2",
                "product": {
                  "name": "IBM MQ 9.2",
                  "product_id": "T016984",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:9.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "MQ"
          },
          {
            "category": "product_name",
            "name": "IBM Operational Decision Manager",
            "product": {
              "name": "IBM Operational Decision Manager",
              "product_id": "T005180",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:operational_decision_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Rational Software Architect",
            "product": {
              "name": "IBM Rational Software Architect",
              "product_id": "T005181",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:rational_software_architect:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM SPSS",
            "product": {
              "name": "IBM SPSS",
              "product_id": "T013570",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spss:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Guardium",
            "product": {
              "name": "IBM Security Guardium",
              "product_id": "T021345",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_guardium:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Spectrum Protect",
            "product": {
              "name": "IBM Spectrum Protect",
              "product_id": "T013661",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spectrum_protect:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Spectrum Scale",
            "product": {
              "name": "IBM Spectrum Scale",
              "product_id": "T019402",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spectrum_scale:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Tivoli Monitoring",
            "product": {
              "name": "IBM Tivoli Monitoring",
              "product_id": "T011128",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:tivoli_monitoring:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Tivoli Netcool/OMNIbus",
            "product": {
              "name": "IBM Tivoli Netcool/OMNIbus",
              "product_id": "T004181",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:tivoli_netcool%2fomnibus:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM WebSphere Application Server",
            "product": {
              "name": "IBM WebSphere Application Server",
              "product_id": "5198",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:websphere_application_server:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper Junos Space",
            "product": {
              "name": "Juniper Junos Space",
              "product_id": "T003343",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:junos_space:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Kyocera Printer",
            "product": {
              "name": "Kyocera Printer",
              "product_id": "T015471",
              "product_identification_helper": {
                "cpe": "cpe:/h:kyocera:printer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Kyocera"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "T016960",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Tools for VMware vSphere",
                "product": {
                  "name": "NetApp Data ONTAP Tools for VMware vSphere",
                  "product_id": "T021401",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:data_ontap:tools_for_vmware_vsphere"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Data ONTAP"
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source Elasticsearch",
            "product": {
              "name": "Open Source Elasticsearch",
              "product_id": "T010062",
              "product_identification_helper": {
                "cpe": "cpe:/a:elasticsearch:elasticsearch:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Open Source LogStash",
            "product": {
              "name": "Open Source LogStash",
              "product_id": "T021264",
              "product_identification_helper": {
                "cpe": "cpe:/a:elasticsearch:logstash:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Palo Alto Networks PAN-OS",
            "product": {
              "name": "Palo Alto Networks PAN-OS",
              "product_id": "T012790",
              "product_identification_helper": {
                "cpe": "cpe:/o:paloaltonetworks:pan-os:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Palo Alto Networks"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "QNAP NAS",
            "product": {
              "name": "QNAP NAS",
              "product_id": "T017100",
              "product_identification_helper": {
                "cpe": "cpe:/h:qnap:nas:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "QNAP"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Authentication Manager",
                "product": {
                  "name": "RSA SecurID Authentication Manager",
                  "product_id": "T021245",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:rsa:securid:::authentication_manager"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SecurID"
          }
        ],
        "category": "vendor",
        "name": "RSA"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat JBoss A-MQ",
            "product": {
              "name": "Red Hat JBoss A-MQ",
              "product_id": "T015887",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:jboss_amq:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform",
                  "product_id": "T003085",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.3.12",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform \u003c7.3.12",
                  "product_id": "T041369"
                }
              },
              {
                "category": "product_version",
                "name": "7.3.12",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform 7.3.12",
                  "product_id": "T041369-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.3.12"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.1.9",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform \u003c7.1.9",
                  "product_id": "T041370"
                }
              },
              {
                "category": "product_version",
                "name": "7.1.9",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform 7.1.9",
                  "product_id": "T041370-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "JBoss Enterprise Application Platform"
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenShift",
            "product": {
              "name": "Red Hat OpenShift",
              "product_id": "367115",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack",
            "product": {
              "name": "Red Hat OpenStack",
              "product_id": "T003522",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Process Automation Manager",
            "product": {
              "name": "Red Hat Process Automation Manager",
              "product_id": "T021270",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:process_automation_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SAP Software",
            "product": {
              "name": "SAP Software",
              "product_id": "T016476",
              "product_identification_helper": {
                "cpe": "cpe:/a:sap:sap:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SAP"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SOS GmbH JobScheduler",
            "product": {
              "name": "SOS GmbH JobScheduler",
              "product_id": "T021263",
              "product_identification_helper": {
                "cpe": "cpe:/a:sos_gmbh:jobscheduler:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SOS GmbH"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV7.4 SP1",
                "product": {
                  "name": "Siemens SIMATIC WinCC \u003cV7.4 SP1",
                  "product_id": "T021273"
                }
              },
              {
                "category": "product_version",
                "name": "V7.4 SP1",
                "product": {
                  "name": "Siemens SIMATIC WinCC V7.4 SP1",
                  "product_id": "T021273-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:siemens:simatic_wincc:v7.4_sp1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC"
          },
          {
            "category": "product_name",
            "name": "Siemens SPPA-T3000",
            "product": {
              "name": "Siemens SPPA-T3000",
              "product_id": "668076",
              "product_identification_helper": {
                "cpe": "cpe:/a:siemens:sppa-t3000_application_server:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SmartBear SoapUI",
            "product": {
              "name": "SmartBear SoapUI",
              "product_id": "T021577",
              "product_identification_helper": {
                "cpe": "cpe:/a:smartbear:soapui:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SmartBear"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Splunk Splunk Enterprise",
            "product": {
              "name": "Splunk Splunk Enterprise",
              "product_id": "T008911",
              "product_identification_helper": {
                "cpe": "cpe:/a:splunk:splunk:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Splunk"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Manager",
                "product": {
                  "name": "Symantec Endpoint Protection Manager",
                  "product_id": "T021244",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:symantec:endpoint_protection:::manager"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Endpoint Protection"
          }
        ],
        "category": "vendor",
        "name": "Symantec"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "TIBCO Managed File Transfer",
            "product": {
              "name": "TIBCO Managed File Transfer",
              "product_id": "T021367",
              "product_identification_helper": {
                "cpe": "cpe:/a:tibco:managed_file_transfer_internet_server:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "TIBCO Spotfire",
            "product": {
              "name": "TIBCO Spotfire",
              "product_id": "T009185",
              "product_identification_helper": {
                "cpe": "cpe:/a:tibco:spotfire:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "TIBCO Spotfire Statistics Services",
            "product": {
              "name": "TIBCO Spotfire Statistics Services",
              "product_id": "T021366",
              "product_identification_helper": {
                "cpe": "cpe:/a:tibco:spotfire_statistics_services:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "TIBCO"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Unify OpenScape 4000",
            "product": {
              "name": "Unify OpenScape 4000",
              "product_id": "T018011",
              "product_identification_helper": {
                "cpe": "cpe:/h:unify:openscape_4000:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Contact Center",
            "product": {
              "name": "Unify OpenScape Contact Center",
              "product_id": "T008876",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_contact_center:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Deployment Service (DLS)",
            "product": {
              "name": "Unify OpenScape Deployment Service (DLS)",
              "product_id": "T015711",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_deployment_service:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Mediaserver",
            "product": {
              "name": "Unify OpenScape Mediaserver",
              "product_id": "T018253",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_mediaserver:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV10.3.10",
                "product": {
                  "name": "Unify OpenScape UC Application \u003cV10.3.10",
                  "product_id": "T021274"
                }
              },
              {
                "category": "product_version",
                "name": "V10.3.10",
                "product": {
                  "name": "Unify OpenScape UC Application V10.3.10",
                  "product_id": "T021274-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:unify:openscape_uc_application:v10.3.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenScape UC Application"
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Voice",
            "product": {
              "name": "Unify OpenScape Voice",
              "product_id": "T008873",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_voice:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Xpert",
            "product": {
              "name": "Unify OpenScape Xpert",
              "product_id": "T018014",
              "product_identification_helper": {
                "cpe": "cpe:/h:unify:openscape_xpert:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Unify"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "VMware Carbon Black Cloud Workload",
            "product": {
              "name": "VMware Carbon Black Cloud Workload",
              "product_id": "950382",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:carbon_black_cloud_workload:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Object Storage Extension",
                "product": {
                  "name": "VMware Cloud Director Object Storage Extension",
                  "product_id": "T021402",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:cloud_director:object_storage_extension"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Cloud Director"
          },
          {
            "category": "product_name",
            "name": "VMware Cloud Foundation",
            "product": {
              "name": "VMware Cloud Foundation",
              "product_id": "658718",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:cloud_foundation:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "VMware Horizon",
            "product": {
              "name": "VMware Horizon",
              "product_id": "T021252",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:horizon:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "VMware Identity Manager",
            "product": {
              "name": "VMware Identity Manager",
              "product_id": "T021253",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:identity_manger:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Data Center for vSphere",
                "product": {
                  "name": "VMware NSX Data Center for vSphere",
                  "product_id": "393634",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:nsx_data_center:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NSX"
          },
          {
            "category": "product_name",
            "name": "VMware SD-WAN",
            "product": {
              "name": "VMware SD-WAN",
              "product_id": "T021403",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:sd-wan_by_velocloud:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Connector",
                "product": {
                  "name": "VMware Workspace One Access Connector",
                  "product_id": "T021254",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:workspace_one_access:::connector"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VMware Workspace One Access",
                "product": {
                  "name": "VMware Workspace One Access",
                  "product_id": "T021255",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:workspace_one_access:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Workspace One Access"
          },
          {
            "category": "product_name",
            "name": "VMware vCenter Server",
            "product": {
              "name": "VMware vCenter Server",
              "product_id": "T012302",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:vcenter_server:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "VMware vRealize Log Insight",
            "product": {
              "name": "VMware vRealize Log Insight",
              "product_id": "T021256",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:vcenter_log_insight:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "VMware vRealize Operations",
                "product": {
                  "name": "VMware vRealize Operations",
                  "product_id": "T021257",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:vrealize_operations:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Cloud Proxy",
                "product": {
                  "name": "VMware vRealize Operations Cloud Proxy",
                  "product_id": "T021404",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:vrealize_operations:::cloud_proxy"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "vRealize Operations"
          },
          {
            "category": "product_name",
            "name": "VMware vRealize Suite Lifecycle Manager",
            "product": {
              "name": "VMware vRealize Suite Lifecycle Manager",
              "product_id": "T021258",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:vrealize_suite_lifecycle_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "VMware"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "VMware Tanzu Spring Boot",
            "product": {
              "name": "VMware Tanzu Spring Boot",
              "product_id": "T021262",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware_tanzu:spring_boot:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "VMware Tanzu"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Wibu-Systems CodeMeter",
            "product": {
              "name": "Wibu-Systems CodeMeter",
              "product_id": "812997",
              "product_identification_helper": {
                "cpe": "cpe:/a:wibu:codemeter:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Wibu-Systems"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-44228",
      "product_status": {
        "known_affected": [
          "T001160",
          "T008876",
          "T008873",
          "T003343",
          "T016816",
          "T011128",
          "T008911",
          "T013661",
          "876876",
          "T021577",
          "398363",
          "950382",
          "393634",
          "T015711",
          "2040",
          "T021345",
          "642",
          "2951",
          "T019704",
          "T003522",
          "812997",
          "T016315",
          "T021308",
          "T019995",
          "T021953",
          "T021273",
          "T009185",
          "T021270",
          "T003085",
          "T021274",
          "T014765",
          "T017100",
          "T019402",
          "T000126",
          "367115",
          "778219",
          "T009295",
          "915286",
          "T015887",
          "T015127",
          "T019293",
          "T015520",
          "T017032",
          "658718",
          "T021258",
          "1017",
          "T021257",
          "T014392",
          "T021256",
          "T021498",
          "T021251",
          "T021250",
          "T021255",
          "T021376",
          "T021254",
          "T021375",
          "T021496",
          "T021253",
          "T006099",
          "T021252",
          "69412",
          "T015519",
          "5198",
          "T015518",
          "T015517",
          "T015516",
          "T010062",
          "T023838",
          "T016960",
          "T018011",
          "T018253",
          "T013570",
          "668076",
          "T018014",
          "T015471",
          "T048328",
          "T014381",
          "T021267",
          "T002207",
          "T041370",
          "T018811",
          "1024",
          "T018812",
          "5104",
          "T021262",
          "T004181",
          "196088",
          "777623",
          "T021266",
          "T002044",
          "T021265",
          "T021264",
          "T021263",
          "5121",
          "67646",
          "T015823",
          "T015027",
          "T012790",
          "T021358",
          "T021357",
          "T021356",
          "T000612",
          "T021878",
          "T021359",
          "T005181",
          "T005180",
          "199167",
          "T041369",
          "T011337",
          "T012302",
          "2143",
          "T016589",
          "T016984",
          "T021248",
          "T021402",
          "T021247",
          "T021401",
          "T021367",
          "T021245",
          "T021366",
          "T021404",
          "T021249",
          "T021403",
          "T021244",
          "T021242"
        ]
      },
      "release_date": "2021-12-09T23:00:00.000+00:00",
      "title": "CVE-2021-44228"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Junos Space ist eine Software-Plattform, die eine Reihe von Applikationen f\u00fcr das Netzwerkmanagement beinhaltet.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren und seine Privilegien zu erweitern.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Juniper Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0063 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2023-0063.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0063 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0063"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory vom 2022-01-12",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11287\u0026cat=SIRT_1"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA70182 vom 2023-01-12",
        "url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Contrail-Service-Orchestration-Multiple-vulnerabilities-resolved-in-CSO-6-3-0?language=en_US"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA103138 vom 2024-10-08",
        "url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Security-Director-Multiple-vulnerabilities-resolved-in-24-1R4-by-upgrading-Log4j-Java-library-to-2-23-1-and-ElasticSearch-to-6-8-17"
      }
    ],
    "source_lang": "en-US",
    "title": "Juniper Junos Space: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-10-08T22:00:00.000+00:00",
      "generator": {
        "date": "2025-10-09T07:39:55.488+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2023-0063",
      "initial_release_date": "2022-01-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-01-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-01-11T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Juniper aufgenommen"
        },
        {
          "date": "2025-10-08T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Juniper aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper Contrail Service Orchestration",
            "product": {
              "name": "Juniper Contrail Service Orchestration",
              "product_id": "T025794",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:contrail_service_orchestration:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c21.3R1",
                "product": {
                  "name": "Juniper Junos Space \u003c21.3R1",
                  "product_id": "T021576"
                }
              },
              {
                "category": "product_version",
                "name": "21.3R1",
                "product": {
                  "name": "Juniper Junos Space 21.3R1",
                  "product_id": "T021576-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:juniper:junos_space:21.3r1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Director \u003c24.1R4",
                "product": {
                  "name": "Juniper Junos Space Security Director \u003c24.1R4",
                  "product_id": "T047484"
                }
              },
              {
                "category": "product_version",
                "name": "Security Director 24.1R4",
                "product": {
                  "name": "Juniper Junos Space Security Director 24.1R4",
                  "product_id": "T047484-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:juniper:junos_space:24.1r4::security_director"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Junos Space"
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-17543",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2019-17543"
    },
    {
      "cve": "CVE-2019-20934",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2019-20934"
    },
    {
      "cve": "CVE-2020-0543",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-0543"
    },
    {
      "cve": "CVE-2020-0548",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-0548"
    },
    {
      "cve": "CVE-2020-0549",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-0549"
    },
    {
      "cve": "CVE-2020-11022",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-11022"
    },
    {
      "cve": "CVE-2020-11023",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-11023"
    },
    {
      "cve": "CVE-2020-11668",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-11668"
    },
    {
      "cve": "CVE-2020-11984",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-11984"
    },
    {
      "cve": "CVE-2020-11993",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-11993"
    },
    {
      "cve": "CVE-2020-12362",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-12362"
    },
    {
      "cve": "CVE-2020-12363",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-12363"
    },
    {
      "cve": "CVE-2020-12364",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-12364"
    },
    {
      "cve": "CVE-2020-1927",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-1927"
    },
    {
      "cve": "CVE-2020-1934",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-1934"
    },
    {
      "cve": "CVE-2020-24489",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-24489"
    },
    {
      "cve": "CVE-2020-24511",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-24511"
    },
    {
      "cve": "CVE-2020-24512",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-24512"
    },
    {
      "cve": "CVE-2020-27170",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-27170"
    },
    {
      "cve": "CVE-2020-27777",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-27777"
    },
    {
      "cve": "CVE-2020-29443",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-29443"
    },
    {
      "cve": "CVE-2020-8625",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-8625"
    },
    {
      "cve": "CVE-2020-8648",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-8648"
    },
    {
      "cve": "CVE-2020-8695",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-8695"
    },
    {
      "cve": "CVE-2020-8696",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-8696"
    },
    {
      "cve": "CVE-2020-8698",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-8698"
    },
    {
      "cve": "CVE-2020-9490",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2020-9490"
    },
    {
      "cve": "CVE-2021-20254",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-20254"
    },
    {
      "cve": "CVE-2021-22555",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-22555"
    },
    {
      "cve": "CVE-2021-22901",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-22901"
    },
    {
      "cve": "CVE-2021-2341",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2341"
    },
    {
      "cve": "CVE-2021-2342",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2342"
    },
    {
      "cve": "CVE-2021-2356",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2356"
    },
    {
      "cve": "CVE-2021-2369",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2369"
    },
    {
      "cve": "CVE-2021-2372",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2372"
    },
    {
      "cve": "CVE-2021-2385",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2385"
    },
    {
      "cve": "CVE-2021-2388",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2388"
    },
    {
      "cve": "CVE-2021-2389",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2389"
    },
    {
      "cve": "CVE-2021-2390",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-2390"
    },
    {
      "cve": "CVE-2021-25214",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-25214"
    },
    {
      "cve": "CVE-2021-25217",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-25217"
    },
    {
      "cve": "CVE-2021-27219",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-27219"
    },
    {
      "cve": "CVE-2021-29154",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-29154"
    },
    {
      "cve": "CVE-2021-29650",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-29650"
    },
    {
      "cve": "CVE-2021-31535",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-31535"
    },
    {
      "cve": "CVE-2021-32399",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-32399"
    },
    {
      "cve": "CVE-2021-33033",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-33033"
    },
    {
      "cve": "CVE-2021-33034",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-33034"
    },
    {
      "cve": "CVE-2021-3347",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-3347"
    },
    {
      "cve": "CVE-2021-33909",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-33909"
    },
    {
      "cve": "CVE-2021-3653",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-3653"
    },
    {
      "cve": "CVE-2021-3656",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-3656"
    },
    {
      "cve": "CVE-2021-3715",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-3715"
    },
    {
      "cve": "CVE-2021-37576",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-37576"
    },
    {
      "cve": "CVE-2021-4104",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-4104"
    },
    {
      "cve": "CVE-2021-42550",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-42550"
    },
    {
      "cve": "CVE-2021-44228",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-44228"
    },
    {
      "cve": "CVE-2021-45046",
      "product_status": {
        "known_affected": [
          "T021576",
          "T047484",
          "T025794"
        ]
      },
      "release_date": "2022-01-12T23:00:00.000+00:00",
      "title": "CVE-2021-45046"
    }
  ]
}