CVE / KEV 查询
输入 CVE 编号，即可在一个页面查看严重程度（CVSS）、被利用概率（EPSS）、是否正在被实际利用（CISA KEV）以及修复线索。优先读取本站自有的情报源数据库，没有时再从 NVD/FIRST 获取。
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
- http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.htmlBroken Link
- https://www.nu11secur1ty.com/2021/12/cve-2021-44228.htmlExploit
- http://www.openwall.com/lists/oss-security/2021/12/13/2Mailing List
- http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.htmlThird Party Advisory
- http://seclists.org/fulldisclosure/2022/Jul/11Mailing List
- https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdfThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/Release Notes
- http://www.openwall.com/lists/oss-security/2021/12/14/4Mailing List
- https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdfThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/12/10/2Mailing List
- http://seclists.org/fulldisclosure/2022/Dec/2Exploit
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228Exploit
使用方法
- 1
输入您关注的 CVE 编号（示例：CVE-2021-44228）。
- 2
页面会显示 CVSS、EPSS、KEV（是否正在被利用）以及修复线索。
- 3
通过“本站的解读文章”或“NVD 官方”页面进一步了解详情。
为什么重要
常见问题
Q什么是 KEV？
这是美国 CISA 发布的《已确认被实际利用的漏洞》目录。被收录进 KEV＝攻击正在现实中发生，是应当最优先处理的对象。
QEPSS 和 CVSS 有何区别？
CVSS 是漏洞的“严重程度”，EPSS 是“未来 30 天内被利用的概率”。严重程度高的漏洞被利用概率也可能很低，两者结合才能现实地确定优先级。
Q任何 CVE 都能查询吗？
本站数据库中收录的 KEV 漏洞会立即显示详情；其他 CVE 只要在 NVD 中有登记，也会实时获取并显示（此时 KEV 显示为“未收录”）。