CVE-2021-44228General(apache / 6bk1602-0aa12-0tp0)

CRITICALCVSS 10.0 · CRITICALCISA KEV

Exploitation observed; activity peaked at 5 mentions and remains active

Immediate actions

Patch apache 6bk1602-0aa12-0tp0 systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

apache CVEs Back to dashboard

9.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-12-24. For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Patch / fix

Exploit / PoC references

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-20CWE-400CWE-502CWE-917

Priority

CRITICAL

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

6bk1602-0aa12-0tp0
6bk1602-0aa12-0tp0_firmware
6bk1602-0aa22-0tp0
6bk1602-0aa22-0tp0_firmware

Threat summary

Active exploitation appears in 14 classified signals
Public PoC and exploit tooling are both present
Patch or workaround signal is available
91 mentions across 63 observed days

What's happening

Active exploitation reported across 14 signals
Exploit tool or code specified in 5 signals
PoC mentioned or linked in 13 signals
Patch or workaround mentioned in 13 signals
Technical details provided in 18 signals
General: 41 classified signals
Peaked 7d ago at 5 mentions (2026-09-28); latest day: 1
91 total mentions across 63 days

Affected systems

Vendors

apache apple bentley cisco debian fedoraproject intel netapp

Products

6bk1602-0aa12-0tp06bk1602-0aa12-0tp0_firmware6bk1602-0aa22-0tp06bk1602-0aa22-0tp0_firmware6bk1602-0aa32-0tp06bk1602-0aa32-0tp0_firmware6bk1602-0aa42-0tp06bk1602-0aa42-0tp0_firmware6bk1602-0aa52-0tp06bk1602-0aa52-0tp0_firmware

147 versions affected across 166 products

Deep dive

Activity timeline91 mentions / 63d

Signal classification6 categories

General

4154.7%

Active Exploitation

1216.0%

Patch

810.7%

PoC

810.7%

Disclosure

34.0%

Exploit

34.0%

Referenced assets36 URLs

By indicator

Classification over time

Date	Total	Labels

2026-01-27	1	Active Exploitation1
2026-01-31	1	Patch1
2026-02-04	1	Active Exploitation1
2026-02-05	1	General1
2026-02-06	1	General1
2026-02-08	1	General1
2026-02-11	1	General1
2026-02-16	1	General1
2026-03-03	2	General2
2026-03-06	2	General2
2026-03-07	2	General2
2026-03-10	1	General1
2026-03-16	1	Patch1
2026-03-21	1	General1
2026-03-22	1	General1
2026-03-24	1	Active Exploitation1
2026-03-29	1	General1
2026-04-04	1	General1
2026-04-07	1	Patch1
2026-04-09	3	General3
2026-04-10	3	General2PoC1
2026-04-11	2	PoC2
2026-04-12	1	PoC1
2026-04-13	2	General1PoC1
2026-04-19	1	General1
2026-04-20	1	Active Exploitation1
2026-04-24	1	General1
2026-04-28	1	General1
2026-05-03	1	Patch1
2026-05-08	1	Active Exploitation1
2026-05-21	1	General1
2026-06-04	1	General1
2026-06-09	2	Active Exploitation1General1
2026-06-26	2	Active Exploitation1Patch1
2026-06-29	1	Active Exploitation1
2026-06-30	1	Active Exploitation1
2026-07-04	1	General1
2026-07-10	2	General1Patch1
2026-07-29	1	PoC1
2026-07-31	2	Disclosure1PoC1
2026-08-04	4	Active Exploitation1Exploit2General1
2026-08-06	1	Active Exploitation1
2026-08-09	1	General1
2026-08-21	1	General1
2026-08-22	1	Active Exploitation1
2026-08-24	1	General1
2026-08-27	3	Disclosure1General1Patch1
2026-09-03	2	Exploit1General1
2026-09-05	1	Patch1
2026-09-07	1	General1
2026-09-11	1	Disclosure1
2026-09-13	1	General1
2026-09-14	1	General1
2026-09-15	1	General1
2026-09-19	2	General1PoC1

Full discourse20 posts

Nitin Gavhane@NitinGavhane_26d
General
CVE Vulnerabilities That Shaped the Bug Bounty World A quick timeline worth knowing: 1. CVE-2014-0160 • Heartbleed - 2014 2. CVE-2014-6271 • Shellshock - 2014 3. CVE-2016-5195 • Dirty COW - 2016 4. CVE-2017-0144 • EternalBlue - 2017 5. CVE-2017-5638 • Apache Struts RCE - 2017 6. CVE-2018-7600 • Drupalgeddon2 - 2018 7. CVE-2019-0708 • BlueKeep - 2019 8. CVE-2021-44228 • Log4Shell - 2021 9. CVE-2023-34362 • MOVEit - 2023 10. CVE-2024-3094 • XZ Utils - 2024 Learn the CVE → understand the root cause → study the patch → reproduce safely in a lab. #BugBounty #CVE #CyberSecurity #SecurityResearch #EthicalHacking #InfoSec #AppSec #Pentesting
Post summary
The text presents a historical timeline of notable CVEs relevant to bug bounty, without details on PoCs, exploits, patches, or active exploitation.
31411016411.3K
3.5K followersView on X
Vivek | Cybersecurity@VivekIntel164d
General
wolf-tools — Threat Intel + Detection Rules Pack 🐺⚡ • Vulnerability Scanners Log4Shell Deep Scan (CVE-2021-44228, 45046) Spring4Shell Deep Scan (CVE-2022-22965) • Threat Intelligence YARA, Sigma, Suricata rules + IOCs • Ransomware Coverage Lorenz ransomware artifacts + detection rules • Exploitation Detection CVE-2023-22527 (Confluence → C3RB3R ransomware) • Defense Controls WDAC policy for blocking dual-use app abuse Focused on real detection + hunting, not theory. 🔗 https://github.com/rtkwlf/wolf-tools #ThreatIntel #SOC #BlueTeam #CyberSecurity #DetectionEngineering
Post summary
The wolf-tools pack offers detection rules and deep scan scripts for several CVEs, with additional threat intel and ransomware coverage; it emphasizes real detection and hunting rather than theoretical discussion.
06024251.8K
16.1K followersView on X
秋津洲@zeki_studydiary9d
好きな脆弱性発表ドラゴンが好きな脆弱性を発表します CVE-2017-0144 CVE-2021-44228 CVE-2023-4863 CVE-2026-31431 正式名称がわからない脆弱性も好き好き大好き
1202161.4K
1.4K followersView on X
devops cdt@devopscdt189d
General
When we work with Vulnerability scans in our Environments for example Docker image scanning by tools like trivy,clair etc., we come across 2 important terms CVE and CVSS Score. Let's try to understand briefly about these in this post. CVE = Common Vulnerabilities and Exposures CVSS = Common Vulnerability Scoring System A CVE is a publicly known security vulnerability in the software/OS/image etc which we scan. When a security flaw is discovered , it gets a unique CVE ID so that we can track and fix it. A CVE looks like CVE-YYYY-NNNNN. Here YYYY indicates the year it was published and NNNNN indicates the unique vulnerability number. Example CVE for Log4Shell vulnerability in log4j--> CVE-2021-44228 These CVEs are maintained by MITRE Corporation(https://cveform.mitre.org/) and they assign the CVE id. We can search the CVEs in https://www.cve.org/ and https://nvd.nist.gov/vuln/search A CVE entry in the above usually includes: --> Vulnerability description --> Affected software versions --> CVSS severity score --> Exploit details --> Fix or patch version CVSS score for a CVE ranges from 0 to 10.Each range indicates a severity level. Score Severity 0 – 3.9 Low 4 – 6.9 Medium 7 – 8.9 High 9 – 10 Critical So when we get CVEs with Critical(Very important) and High, we need to fix them with high priority by checking the vendor documentation of software we use and by applying corresponding patches etc. And for medium and Low we can apply the security patches at regular intervals. This CVSS Score is calculated based on three categories of metrics. We would see about this in next post.
Post summary
The post provides a general overview of CVE and CVSS concepts, including how patches are referenced, but it does not discuss specific exploits, PoC, or active attacks.
10072216
1.4K followersView on X
ExploitGrid@exploitgrid10d
#ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2021-44228 (CVSS: 10) #Apache Softw... CVE-2021-44228 (CVSS: 10) Apache Softw... CVE-2025-32433 (CVSS: 10) erlang CVE-2026-100382 (CVSS: 10) Wikimedia Fo... CVE-2026-97163 (CVSS: 10) https://lomart.fr ..🧵👇
10032570
377 followersView on X
precious adedokun@preciousad20395183d
General
First time with Log4Shell — Unified (HTB Tier 2) delivered. JNDI payload → Burp intercept → rogue LDAP → shell → MongoDB → root 🎯 CVE-2021-44228 isn't just a headline anymore. Full breakdown 👇 https://www.linkedin.com/posts/precious-adedokun-b857223a6_hackthebox-ctf-log4shell-share-7448214114750943232-YTgr?utm_source=share&utm_medium=member_desktop&rcm=ACoAAGNrKhUBPSTQY4oBZV9UNHpz7NXC7ubEVjg #HackTheBox #Log4Shell #CTF
Post summary
The post is a post‑CTF write‑up that provides a technical breakdown of Log4Shell exploitation. It references a likely PoC but does not confirm active exploitation or provide a functional exploit script.
10050136
27 followersView on X
CERT-PY@CERTpy33d
General
⚠️ Vulnerabilidad en productos Apache ❗ CVE-2021-44228 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-apache-13/ https://t.co/5rWX24jWPD
Post summary
The post notes a CVE (CVE-2021-44228) affecting Apache products and offers two URLs for more information, but it lacks details about exploitation, patches, or technical specifics.
02030388
6.7K followersView on X
DEGEN 👑@iamjustape106d
Active Exploitation
Good morning everyone. 🌅 End of week thought: Log4Shell CVE-2021-44228 was published December 9th, 2021. Within 12 hours of publication, active exploitation was observed globally. Within 72 hours, hundreds of millions of devices were estimated to be at risk. Not because it was hard to understand. Because Log4j was in everything servers, games, enterprise software, cloud services, embedded systems and almost nobody had a complete inventory of where they were running it. The vulnerability wasn't the hard part. Knowing where to patch was. Asset inventory is unglamorous. It matters more than most security controls. Have a good Friday. 🔐
Post summary
The post confirms Log4j’s CVE-2021-44228 was actively exploited globally shortly after its discovery and highlights the urgent need for patching across diverse systems.
2102073
3.9K followersView on X
Anmol K Sachan@FR13ND0x7F91d
Patch
A CVE lands in Slack. No context. Just `CVE-2021-44228` + a question mark. 20 minutes and 11 browser tabs later you send back one sentence: "yeah, patch that, it's real." Context switching is the tax every pentester silently pays. So I rebuilt ThreatTracer. v5.0 🧵 https://t.co/yobwnWLAvv
Post summary
The tweet references CVE‑2021‑44228 and urges users to patch it, but offers no exploit, technical details, or evidence of active exploitation.
20011331
448 followersView on X
TechCampus@techcampuscom128d
General
صيف تطوير المهارات والإستعداد لسوق العمل 💼 CVE = Common Vulnerabilities and Exposures قاعدة بيانات عالمية لكل ثغرة مكتشفة. مثال: CVE-2021-44228 = ثغرة Log4Shell الشهيرة. محترف الأمن يقرأ CVEs يومياً ✅ معسكر الأمن السيبراني التأسيسي 🛡 يعودك على هذه العادة. دورات المعسكر: ▪️دورة اساسيات نظام التشغيل لينكس +CompTIA Linux ▪️دورة اساسيات الامن السيبراني +CompTIA Security ▪️ دورة الاختراق الأخلاقي Kali Linux ❤️دورة اساسيات الشبكات +CompTIA Network ( مجاناً ) ❤️دورة اساسيات صيانة الحاسب والدعم الفني +CompTIA A ( مجاناً ) مميزات التدريب: ▪️التدريب عن بُعد ▪️مسائي ▪️باللغة العربية ▪️للمبتدئين ▪️ شهادة معتمدة ▪️ شهادات حضور ▪️ حقائب تدريبية ▪️ اختبارات تجريبية ▪️ اشتراك سنة كاملة في Hackhubs 🔵 خصم 50٪ كود: Offer50 https://techcamp.us/26ec للإستفسارات على الخاص: @TechCampus_Help
Post summary
This is a promotional message for a cybersecurity training camp that briefly mentions CVEs as part of its teaching material, without providing any technical or exploit-related information.
00031602
68.1K followersView on X
ExploitGrid@exploitgrid20d
General
🛡️ #ExploitGrid Daily Threat Digest Critical Exploits disclosed today: CVE-2021-44228 CVE-2025-24813 CVE-2025-32433 CVE-2026-32604 CVE-2024-30804 ..🧵👇
Post summary
The post is a daily threat digest that announces several critical CVEs described as exploits, but it lacks specific indicators such as PoC links, exploit tools, active exploitation reports, patch information, or technical vulnerability details.
1101088
50 followersView on X
ねこさん⚡(ΦωΦ)@catnap70744d
Disclosure
Log4j2にRCEを可能にし得る新たな脆弱性 | Codebook｜Security News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47384/ "Apache Log4j2における新たなリモートコード実行の脆弱性が、8月24日に開示されている。ただし、影響を受けるのは特定の構成に限られ、Log4Shell（CVE-2021-44228）ほど深刻なわけではない模様"
Post summary
A new Log4j2 remote code execution vulnerability was disclosed on August 24, but it only affects specific configurations and is not as severe as the Log4Shell CVE.
10101520
3.5K followersView on X
ExploitGrid@exploitgrid67d
General
🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: EGE-GH-gXcrY61 ( CVE-2021-44228 ) EGE-GH-mlHKBE9 ( CVE-2021-44228 ) EGE-GH-UkC3bPM ( CVE-2026-57827 ) EGE-GH-kQvdrdy ( CVE-2021-21972 ) EGE-GH-UzPcxEL ( CVE-2023-33246 ) ..🧵👇
Post summary
The post lists several CVE identifiers as ‘critical exploits disclosed today’ but provides no additional details, PoC, exploit code, or mitigation information.
1101043
29 followersView on X
sicehice@sicehice172d
Active Exploitation
#RCE attempt exploiting Log4Shell (CVE-2021-44228) to deploy a Monero miner #log4j 2026-04-20 20:21:58 UTC Source IP: 80.75.212.14 🇩🇪 IOCs: hxxp://31.57.109.131/scripts/4thepool_miner.sh 31.57.109.131 🇫🇷 https://t.co/VERzsoRSSS
Post summary
The tweet reports an active exploit of Log4Shell (CVE-2021-44228) to deploy a Monero miner, providing a link to the malicious script and the source IP of the attempt.
00021371
1.7K followersView on X
ExploitGrid@exploitgrid20d
PoC
[EXPLOIT] CVE-2021-44228 [CRITICAL/PoC] log4shell-audit 🔗 https://exploitgrid.net/exploits/e96b2a98-fc47-4c66-8bdd-b943182d428e
Post summary
The tweet announces a proof of concept for CVE-2021-44228 (log4shell) and supplies a link to an exploit resource, making the PoC publicly accessible.
1001048
50 followersView on X
Zac@ZacZakirin1350d
General
@hariz_marzuki "Log4Shell is the name given to the critical vulnerability in Log4j, formally CVE-2021-44228, disclosed in December 2021.". - cgpt. Haha
Post summary
The text merely identifies CVE-2021-44228 as 'Log4Shell' and labels it a critical vulnerability, but provides no actionable details, PoC, tools, or patch information.
10001555
21.4K followersView on X
Nitin Gavhane@NitinGavhane_62d
General
@shodanhq 7/13 Vuln & CVE Filters • vuln:CVE-2021-44228 (Log4Shell) • vuln:CVE-2019-19781 • tag:ics • cloud.provider:AWS • cloud.region:us-east-1 Directly hunt known vulnerable services. #bugbounty #infosec #hacking #cybersecurity #vuln
Post summary
The tweet provides a set of filters for known CVEs (Log4Shell and CVE‑2019‑19781) to assist in hunting vulnerable services, but offers no technical details, PoC, patch, or exploitation evidence.
10010158
1.2K followersView on X
DEGEN 👑@iamjustape106d
Patch
Log4Shell CVE-2021-44228 the most important thing to understand about it isn't the vulnerability itself. It's the asset inventory problem it exposed. The exploit was one line in an HTTP header. The patch was available the same day. What took months was finding every place Log4j was running because it was a dependency of a dependency of a dependency in many systems, and nobody had a complete map. If your organization can't answer what software components are running in our infrastructure and what versions you have the Log4Shell problem regardless of whether Log4j specifically is involved. An SBOM Software Bill of Materials is the structured answer to that question. Required for US federal software procurement since 2021. Still not standard practice in most small and medium organizations. OWASP Dependency-Check is free. Snyk has a free tier. Both catch the Log4Shell category of problem in your own code before it becomes a production emergency. 🔐
Post summary
The post emphasizes that Log4Shell was easy to exploit, the patch arrived the same day, and urges organizations to maintain accurate inventory and SBOMs to manage such vulnerabilities.
0101091
4.0K followersView on X
qwas@qwas487355173d
General
@SwedPaul @svgmzr Ну пинить зависимости никто не запрещает. А в джаве свои такие же приколы есть, CVE-2021-44228 тот же был довольно эпичным.
Post summary
The tweet merely references CVE‑2021‑44228 as an interesting case, offering no technical or operational detail.
0002077
1 followersView on X
BotBauR@BotBauR186d
Patch
La lección clave de LulzSec es la importancia de proteger las aplicaciones web y bases de datos contra ataques de inyección SQL. Se recomienda revisar y parchear vulnerabilidades conocidas, como SQL Injection (CVE-2021-44228), y monitorear actividad sospechosa con herramientas como Nmap y Nikto. (5/6)
Post summary
The post highlights the need to patch known SQL injection vulnerabilities, specifically CVE-2021-44228, and recommends monitoring with tools like Nmap and Nikto.
1001050
123 followersView on X

CPE platform detail381 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

381 of 381 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	apache	log4j	-	-	-
App	apache	log4j	2.0	-	-
App	apache	log4j	2.0	-	-
App	apache	log4j	2.0	-	-
App	apache	log4j	2.0	-	-
App	apple	xcode	-	-	-
App	bentley	synchro	-	-	-
App	bentley	synchro_4d	-	-	-
App	cisco	advanced_malware_protection_virtual_private_cloud_appliance	-	-	-
App	cisco	automated_subsea_tuning	-	-	-
App	cisco	automated_subsea_tuning	02.01.00	-	-
App	cisco	broadworks	-	-	-
App	cisco	broadworks	-	-	-
App	cisco	business_process_automation	-	-	-
App	cisco	cloud_connect	-	-	-
App	cisco	cloudcenter	-	-	-
App	cisco	cloudcenter_cost_optimizer	-	-	-
App	cisco	cloudcenter_suite	4.10.0.15	-	-
App	cisco	cloudcenter_suite	5.3.0	-	-
App	cisco	cloudcenter_suite	5.4.1	-	-
App	cisco	cloudcenter_suite	5.5.0	-	-
App	cisco	cloudcenter_suite	5.5.1	-	-
App	cisco	cloudcenter_suite_admin	-	-	-
App	cisco	cloudcenter_workload_manager	-	-	-
App	cisco	common_services_platform_collector	-	-	-
App	cisco	common_services_platform_collector	002.009\(000.000\)	-	-
App	cisco	common_services_platform_collector	002.009\(000.001\)	-	-
App	cisco	common_services_platform_collector	002.009\(000.002\)	-	-
App	cisco	common_services_platform_collector	002.009\(001.000\)	-	-
App	cisco	common_services_platform_collector	002.009\(001.001\)	-	-
App	cisco	common_services_platform_collector	002.009\(001.002\)	-	-
App	cisco	common_services_platform_collector	002.010\(000.000\)	-	-
App	cisco	connected_mobile_experiences	-	-	-
App	cisco	contact_center_domain_manager	-	-	-
App	cisco	contact_center_management_portal	-	-	-
App	cisco	crosswork_data_gateway	-	-	-
App	cisco	crosswork_data_gateway	3.0.0	-	-
App	cisco	crosswork_network_automation	-	-	-
App	cisco	crosswork_network_automation	2.0.0	-	-
App	cisco	crosswork_network_automation	3.0.0	-	-
App	cisco	crosswork_network_automation	4.1.0	-	-
App	cisco	crosswork_network_automation	4.1.1	-	-
App	cisco	crosswork_network_controller	-	-	-
App	cisco	crosswork_network_controller	3.0.0	-	-
App	cisco	crosswork_optimization_engine	-	-	-
App	cisco	crosswork_optimization_engine	3.0.0	-	-
App	cisco	crosswork_platform_infrastructure	-	-	-
App	cisco	crosswork_platform_infrastructure	4.1.0	-	-
App	cisco	crosswork_zero_touch_provisioning	-	-	-
App	cisco	crosswork_zero_touch_provisioning	3.0.0	-	-
App	cisco	customer_experience_cloud_agent	-	-	-
App	cisco	cx_cloud_agent	001.012	-	-
App	cisco	cyber_vision	4.0.2	-	-
App	cisco	cyber_vision_sensor_management_extension	-	-	-
App	cisco	cyber_vision_sensor_management_extension	4.0.2	-	-
App	cisco	data_center_network_manager	-	-	-
App	cisco	data_center_network_manager	11.3\(1\)	-	-
App	cisco	dna_center	-	-	-
App	cisco	dna_center	2.2.2.8	-	-
App	cisco	dna_spaces	-	-	-
App	cisco	dna_spaces\	_connector	-	-
App	cisco	dna_spaces_connector	-	-	-
App	cisco	emergency_responder	-	-	-
App	cisco	emergency_responder	11.5	-	-
App	cisco	emergency_responder	11.5\(4.65000.14\)	-	-
App	cisco	emergency_responder	11.5\(4.66000.14\)	-	-
App	cisco	enterprise_chat_and_email	-	-	-
App	cisco	enterprise_chat_and_email	12.0\(1\)	-	-
App	cisco	enterprise_chat_and_email	12.5\(1\)	-	-
App	cisco	enterprise_chat_and_email	12.6\(1\)	-	-
App	cisco	evolved_programmable_network_manager	-	-	-
App	cisco	evolved_programmable_network_manager	3.0	-	-
App	cisco	evolved_programmable_network_manager	3.1	-	-
App	cisco	evolved_programmable_network_manager	4.0	-	-
App	cisco	evolved_programmable_network_manager	4.1	-	-
App	cisco	evolved_programmable_network_manager	5.0	-	-
App	cisco	evolved_programmable_network_manager	5.1	-	-
App	cisco	finesse	-	-	-
App	cisco	finesse	12.5\(1\)	-	-
App	cisco	finesse	12.5\(1\)	-	-
App	cisco	finesse	12.6\(1\)	-	-
App	cisco	finesse	12.6\(1\)	-	-
App	cisco	finesse	12.6\(1\)	-	-
App	cisco	finesse	12.6\(1\)	-	-
App	cisco	finesse	12.6\(1\)	-	-
HW	cisco	firepower_1010	-	-	-
HW	cisco	firepower_1120	-	-	-
HW	cisco	firepower_1140	-	-	-
HW	cisco	firepower_1150	-	-	-
HW	cisco	firepower_2110	-	-	-
HW	cisco	firepower_2120	-	-	-
HW	cisco	firepower_2130	-	-	-
HW	cisco	firepower_2140	-	-	-
HW	cisco	firepower_4110	-	-	-
HW	cisco	firepower_4112	-	-	-
HW	cisco	firepower_4115	-	-	-
HW	cisco	firepower_4120	-	-	-
HW	cisco	firepower_4125	-	-	-
HW	cisco	firepower_4140	-	-	-
HW	cisco	firepower_4145	-	-	-
HW	cisco	firepower_4150	-	-	-
HW	cisco	firepower_9300	-	-	-
App	cisco	fog_director	-	-	-
OS	cisco	fxos	6.2.3	-	-
OS	cisco	fxos	6.3.0	-	-
OS	cisco	fxos	6.4.0	-	-
OS	cisco	fxos	6.5.0	-	-
OS	cisco	fxos	6.6.0	-	-
OS	cisco	fxos	6.7.0	-	-
OS	cisco	fxos	7.0.0	-	-
OS	cisco	fxos	7.1.0	-	-
App	cisco	identity_services_engine	-	-	-
App	cisco	identity_services_engine	002.004\(000.914\)	-	-
App	cisco	identity_services_engine	002.006\(000.156\)	-	-
App	cisco	identity_services_engine	002.007\(000.356\)	-	-
App	cisco	identity_services_engine	003.000\(000.458\)	-	-
App	cisco	identity_services_engine	003.001\(000.518\)	-	-
App	cisco	identity_services_engine	003.002\(000.116\)	-	-
App	cisco	identity_services_engine	2.4.0	-	-
App	cisco	integrated_management_controller_supervisor	-	-	-
App	cisco	integrated_management_controller_supervisor	002.003\(002.000\)	-	-
App	cisco	integrated_management_controller_supervisor	2.3.2.0	-	-
App	cisco	intersight_virtual_appliance	-	-	-
App	cisco	intersight_virtual_appliance	1.0.9-343	-	-
App	cisco	iot_operations_dashboard	-	-	-
App	cisco	mobility_services_engine	-	-	-
App	cisco	network_assurance_engine	-	-	-
App	cisco	network_assurance_engine	6.0\(2.1912\)	-	-
App	cisco	network_dashboard_fabric_controller	11.0\(1\)	-	-
App	cisco	network_dashboard_fabric_controller	11.1\(1\)	-	-
App	cisco	network_dashboard_fabric_controller	11.2\(1\)	-	-
App	cisco	network_dashboard_fabric_controller	11.3\(1\)	-	-
App	cisco	network_dashboard_fabric_controller	11.4\(1\)	-	-
App	cisco	network_dashboard_fabric_controller	11.5\(1\)	-	-
App	cisco	network_dashboard_fabric_controller	11.5\(2\)	-	-
App	cisco	network_dashboard_fabric_controller	11.5\(3\)	-	-
App	cisco	network_insights_for_data_center	6.0\(2.1914\)	-	-
App	cisco	network_services_orchestrator	-	-	-
App	cisco	network_services_orchestrator	-	-	-
App	cisco	nexus_dashboard	-	-	-
App	cisco	nexus_insights	-	-	-
App	cisco	optical_network_controller	-	-	-
App	cisco	optical_network_controller	1.1	-	-
App	cisco	packaged_contact_center_enterprise	-	-	-
App	cisco	packaged_contact_center_enterprise	11.6\(1\)	-	-
App	cisco	paging_server	-	-	-
App	cisco	paging_server	12.5\(2\)	-	-
App	cisco	paging_server	14.0\(1\)	-	-
App	cisco	paging_server	8.3\(1\)	-	-
App	cisco	paging_server	8.4\(1\)	-	-
App	cisco	paging_server	8.5\(1\)	-	-
App	cisco	paging_server	9.0\(1\)	-	-
App	cisco	paging_server	9.0\(2\)	-	-
App	cisco	paging_server	9.1\(1\)	-	-
App	cisco	prime_service_catalog	-	-	-
App	cisco	prime_service_catalog	12.1	-	-
App	cisco	sd-wan_vmanage	-	-	-
App	cisco	sd-wan_vmanage	20.3	-	-
App	cisco	sd-wan_vmanage	20.4	-	-
App	cisco	sd-wan_vmanage	20.5	-	-
App	cisco	sd-wan_vmanage	20.6	-	-
App	cisco	sd-wan_vmanage	20.6.1	-	-
App	cisco	sd-wan_vmanage	20.7	-	-
App	cisco	sd-wan_vmanage	20.8	-	-
App	cisco	secure_firewall_threat_defense	6.2.3	-	-
App	cisco	secure_firewall_threat_defense	6.3.0	-	-
App	cisco	secure_firewall_threat_defense	6.4.0	-	-
App	cisco	secure_firewall_threat_defense	6.5.0	-	-
App	cisco	secure_firewall_threat_defense	6.6.0	-	-
App	cisco	secure_firewall_threat_defense	6.7.0	-	-
App	cisco	secure_firewall_threat_defense	7.0.0	-	-
App	cisco	secure_firewall_threat_defense	7.1.0	-	-
App	cisco	smart_phy	-	-	-
App	cisco	smart_phy	21.3	-	-
App	cisco	smart_phy	3.1.2	-	-
App	cisco	smart_phy	3.1.3	-	-
App	cisco	smart_phy	3.1.4	-	-
App	cisco	smart_phy	3.1.5	-	-
App	cisco	smart_phy	3.2.1	-	-
App	cisco	ucs_central	-	-	-
App	cisco	ucs_central_software	2.0	-	-
App	cisco	ucs_central_software	2.0\(1a\)	-	-
App	cisco	ucs_central_software	2.0\(1b\)	-	-
App	cisco	ucs_central_software	2.0\(1c\)	-	-
App	cisco	ucs_central_software	2.0\(1d\)	-	-
App	cisco	ucs_central_software	2.0\(1e\)	-	-
App	cisco	ucs_central_software	2.0\(1f\)	-	-
App	cisco	ucs_central_software	2.0\(1g\)	-	-
App	cisco	ucs_central_software	2.0\(1h\)	-	-
App	cisco	ucs_central_software	2.0\(1k\)	-	-
App	cisco	ucs_central_software	2.0\(1l\)	-	-
App	cisco	ucs_director	-	-	-
App	cisco	unified_communications_manager	-	-	-
App	cisco	unified_communications_manager	-	-	-
App	cisco	unified_communications_manager	11.5\(1.17900.52\)	-	-
App	cisco	unified_communications_manager	11.5\(1.18119.2\)	-	-
App	cisco	unified_communications_manager	11.5\(1.18900.97\)	-	-
App	cisco	unified_communications_manager	11.5\(1.21900.40\)	-	-
App	cisco	unified_communications_manager	11.5\(1.22900.28\)	-	-
App	cisco	unified_communications_manager	11.5\(1\)	-	-
App	cisco	unified_communications_manager	11.5\(1\)	-	-
App	cisco	unified_communications_manager	11.5\(1\)	-	-
App	cisco	unified_communications_manager	11.5\(1\)su3	-	-
App	cisco	unified_communications_manager_im_\&_presence_service	11.5\(1.22900.6\)	-	-
App	cisco	unified_communications_manager_im_\&_presence_service	11.5\(1\)	-	-
App	cisco	unified_communications_manager_im_and_presence_service	-	-	-
App	cisco	unified_communications_manager_im_and_presence_service	11.5\(1\)	-	-
App	cisco	unified_computing_system	006.008\(001.000\)	-	-
App	cisco	unified_contact_center_enterprise	-	-	-
App	cisco	unified_contact_center_enterprise	11.6\(2\)	-	-
App	cisco	unified_contact_center_enterprise	12.0\(1\)	-	-
App	cisco	unified_contact_center_enterprise	12.5\(1\)	-	-
App	cisco	unified_contact_center_enterprise	12.6\(1\)	-	-
App	cisco	unified_contact_center_enterprise	12.6\(2\)	-	-
App	cisco	unified_contact_center_express	-	-	-
App	cisco	unified_contact_center_express	12.5\(1\)	-	-
App	cisco	unified_contact_center_express	12.5\(1\)	-	-
App	cisco	unified_contact_center_express	12.6\(1\)	-	-
App	cisco	unified_contact_center_express	12.6\(2\)	-	-
App	cisco	unified_contact_center_management_portal	12.6\(1\)	-	-
App	cisco	unified_customer_voice_portal	-	-	-
App	cisco	unified_customer_voice_portal	11.6	-	-
App	cisco	unified_customer_voice_portal	11.6\(1\)	-	-
App	cisco	unified_customer_voice_portal	12.0	-	-
App	cisco	unified_customer_voice_portal	12.0\(1\)	-	-
App	cisco	unified_customer_voice_portal	12.5	-	-
App	cisco	unified_customer_voice_portal	12.5\(1\)	-	-
App	cisco	unified_customer_voice_portal	12.6\(1\)	-	-
App	cisco	unified_intelligence_center	-	-	-
App	cisco	unified_intelligence_center	12.6\(1\)	-	-
App	cisco	unified_intelligence_center	12.6\(1\)	-	-
App	cisco	unified_intelligence_center	12.6\(1\)	-	-
App	cisco	unified_intelligence_center	12.6\(2\)	-	-
OS	cisco	unified_sip_proxy	-	-	-
App	cisco	unified_sip_proxy	010.000\(000\)	-	-
App	cisco	unified_sip_proxy	010.000\(001\)	-	-
App	cisco	unified_sip_proxy	010.002\(000\)	-	-
App	cisco	unified_sip_proxy	010.002\(001\)	-	-
OS	cisco	unified_workforce_optimization	-	-	-
App	cisco	unified_workforce_optimization	11.5\(1\)	-	-
App	cisco	unity_connection	-	-	-
App	cisco	unity_connection	11.5	-	-
App	cisco	unity_connection	11.5\(1.10000.6\)	-	-
App	cisco	video_surveillance_manager	7.14\(1.26\)	-	-
App	cisco	video_surveillance_manager	7.14\(2.26\)	-	-
App	cisco	video_surveillance_manager	7.14\(3.025\)	-	-
App	cisco	video_surveillance_manager	7.14\(4.018\)	-	-
App	cisco	video_surveillance_operations_manager	-	-	-
App	cisco	virtual_topology_system	-	-	-
App	cisco	virtual_topology_system	2.6.6	-	-
App	cisco	virtualized_infrastructure_manager	-	-	-
App	cisco	virtualized_voice_browser	-	-	-
App	cisco	wan_automation_engine	-	-	-
App	cisco	wan_automation_engine	7.1.3	-	-
App	cisco	wan_automation_engine	7.2.1	-	-
App	cisco	wan_automation_engine	7.2.2	-	-
App	cisco	wan_automation_engine	7.2.3	-	-
App	cisco	wan_automation_engine	7.3	-	-
App	cisco	wan_automation_engine	7.4	-	-
App	cisco	wan_automation_engine	7.5	-	-
App	cisco	wan_automation_engine	7.6	-	-
App	cisco	webex_meetings_server	-	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	3.0	-	-
App	cisco	webex_meetings_server	4.0	-	-
App	cisco	webex_meetings_server	4.0	-	-
App	cisco	webex_meetings_server	4.0	-	-
App	cisco	webex_meetings_server	4.0	-	-
App	cisco	webex_meetings_server	4.0	-	-
App	cisco	workload_optimization_manager	-	-	-
OS	debian	debian_linux	10.0	-	-
OS	debian	debian_linux	11.0	-	-
OS	debian	debian_linux	9.0	-	-
OS	fedoraproject	fedora	34	-	-
OS	fedoraproject	fedora	35	-	-
App	intel	computer_vision_annotation_tool	-	-	-
App	intel	datacenter_manager	-	-	-
App	intel	genomics_kernel_library	-	-	-
App	intel	oneapi_sample_browser	-	eclipse	-
App	intel	secure_device_onboard	-	-	-
App	intel	system_studio	-	-	-
App	netapp	active_iq_unified_manager	-	linux	-
App	netapp	active_iq_unified_manager	-	vmware_vsphere	-
App	netapp	active_iq_unified_manager	-	windows	-
App	netapp	brocade_san_navigator	-	-	-
App	netapp	cloud_insights	-	-	-
App	netapp	cloud_manager	-	-	-
App	netapp	cloud_secure_agent	-	-	-
App	netapp	oncommand_insight	-	-	-
App	netapp	ontap_tools	-	vmware_vsphere	-
App	netapp	snapcenter	-	vmware_vsphere	-
App	netapp	solidfire_\&_hci_storage_node	-	-	-
App	netapp	solidfire_enterprise_sds	-	-	-
App	percussion	rhythmyx	-	-	-
HW	siemens	6bk1602-0aa12-0tp0	-	-	-
OS	siemens	6bk1602-0aa12-0tp0_firmware	-	-	-
HW	siemens	6bk1602-0aa22-0tp0	-	-	-
OS	siemens	6bk1602-0aa22-0tp0_firmware	-	-	-
HW	siemens	6bk1602-0aa32-0tp0	-	-	-
OS	siemens	6bk1602-0aa32-0tp0_firmware	-	-	-
HW	siemens	6bk1602-0aa42-0tp0	-	-	-
OS	siemens	6bk1602-0aa42-0tp0_firmware	-	-	-
HW	siemens	6bk1602-0aa52-0tp0	-	-	-
OS	siemens	6bk1602-0aa52-0tp0_firmware	-	-	-
App	siemens	capital	-	-	-
App	siemens	capital	2019.1	-	-
App	siemens	capital	2019.1	-	-
App	siemens	comos	-	-	-
App	siemens	desigo_cc_advanced_reports	3.0	-	-
App	siemens	desigo_cc_advanced_reports	4.0	-	-
App	siemens	desigo_cc_advanced_reports	4.1	-	-
App	siemens	desigo_cc_advanced_reports	4.2	-	-
App	siemens	desigo_cc_advanced_reports	5.0	-	-
App	siemens	desigo_cc_advanced_reports	5.1	-	-
App	siemens	desigo_cc_info_center	5.0	-	-
App	siemens	desigo_cc_info_center	5.1	-	-
App	siemens	e-car_operation_center	-	-	-
App	siemens	energy_engage	3.1	-	-
App	siemens	energyip	8.5	-	-
App	siemens	energyip	8.6	-	-
App	siemens	energyip	8.7	-	-
App	siemens	energyip	9.0	-	-
App	siemens	energyip_prepay	-	-	-
App	siemens	gma-manager	-	-	-
App	siemens	head-end_system_universal_device_integration_system	-	-	-
App	siemens	industrial_edge_management	-	-	-
App	siemens	industrial_edge_management_hub	-	-	-
App	siemens	logo\!_soft_comfort	-	-	-
App	siemens	mendix	-	-	-
App	siemens	mindsphere	-	-	-
App	siemens	navigator	-	-	-
App	siemens	nx	-	-	-
App	siemens	opcenter_intelligence	-	-	-
App	siemens	operation_scheduler	-	-	-
App	siemens	sentron_powermanager	4.1	-	-
App	siemens	sentron_powermanager	4.2	-	-
App	siemens	siguard_dsa	-	-	-
App	siemens	sipass_integrated	2.80	-	-
App	siemens	sipass_integrated	2.85	-	-
App	siemens	siveillance_command	-	-	-
App	siemens	siveillance_control_pro	-	-	-
App	siemens	siveillance_identity	1.5	-	-
App	siemens	siveillance_identity	1.6	-	-
App	siemens	siveillance_vantage	-	-	-
App	siemens	siveillance_viewpoint	-	-	-
App	siemens	solid_edge_cam_pro	-	-	-
App	siemens	solid_edge_harness_design	-	-	-
App	siemens	solid_edge_harness_design	2020	-	-
App	siemens	solid_edge_harness_design	2020	-	-
App	siemens	solid_edge_harness_design	2020	-	-
App	siemens	spectrum_power_4	-	-	-
App	siemens	spectrum_power_4	4.70	-	-
App	siemens	spectrum_power_4	4.70	-	-
App	siemens	spectrum_power_4	4.70	-	-
App	siemens	spectrum_power_7	-	-	-
App	siemens	spectrum_power_7	2.30	-	-
App	siemens	spectrum_power_7	2.30	-	-
App	siemens	spectrum_power_7	2.30	-	-
HW	siemens	sppa-t3000_ses3000	-	-	-
OS	siemens	sppa-t3000_ses3000_firmware	-	-	-
App	siemens	teamcenter	-	-	-
App	siemens	vesys	-	-	-
App	siemens	vesys	2019.1	-	-
App	siemens	vesys	2019.1	-	-
App	siemens	vesys	2019.1	-	-
App	siemens	vesys	2020.1	-	-
App	siemens	vesys	2021.1	-	-
App	siemens	xpedition_enterprise	-	-	-
App	siemens	xpedition_package_integrator	-	-	-
App	snowsoftware	snow_commander	-	-	-
App	snowsoftware	vm_access_proxy	-	-	-
App	sonicwall	email_security	-	-	-

Explore more

Back to dashboard apache CVEs apple CVEs bentley CVEs 6bk1602-0aa12-0tp0 vulnerabilities

What researchers are saying

CVE-2021-44228

Nitin Gavhane[verified]@NitinGavhane_General

The text presents a historical timeline of notable CVEs relevant to bug bounty, without details on PoCs, exploits, patches, or active exploitation.

Vivek | Cybersecurity[verified]@VivekIntelGeneral

The wolf-tools pack offers detection rules and deep scan scripts for several CVEs, with additional threat intel and ransomware coverage; it emphasizes real detection and hunting rather than theoretical discussion.

TechCampus[verified]@techcampuscomGeneral

This is a promotional message for a cybersecurity training camp that briefly mentions CVEs as part of its teaching material, without providing any technical or exploit-related information.

Zac[verified]@ZacZakirin13General

The text merely identifies CVE-2021-44228 as 'Log4Shell' and labels it a critical vulnerability, but provides no actionable details, PoC, tools, or patch information.

Nitin Gavhane[verified]@NitinGavhane_General

The tweet provides a set of filters for known CVEs (Log4Shell and CVE‑2019‑19781) to assist in hunting vulnerable services, but offers no technical details, PoC, patch, or exploitation evidence.

DEGEN 👑[verified]@iamjustapePatch

The post emphasizes that Log4Shell was easy to exploit, the patch arrived the same day, and urges organizations to maintain accurate inventory and SBOMs to manage such vulnerabilities.

BotBauR[verified]@BotBauRPatch

The post highlights the need to patch known SQL injection vulnerabilities, specifically CVE-2021-44228, and recommends monitoring with tools like Nmap and Nikto.

devops cdt@devopscdtGeneral

The post provides a general overview of CVE and CVSS concepts, including how patches are referenced, but it does not discuss specific exploits, PoC, or active attacks.