Vulnerability · Intelligence

KEV + EPSS Lookup

Is this CVE actively exploited, and how likely is exploitation? Check CISA KEV and the FIRST EPSS score, then pivot to its exploits in our database.

CISA KEV — Known Exploited
⚠ Actively Exploited
Vendor/Product: Apache / Log4j2
Added: 2021-12-10 · Due: 2021-12-24
Ransomware: Known
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
EPSS — Exploit Prediction
100%

probability of exploitation in the next 30 days

percentile 100% · as of 2026-10-31
In the ExploitPortal database
CRITICAL CVSS 0.0 53 exploit records View in database

Apache Log4j2: Apache Log4j2 Remote Code Execution Vulnerability. Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution. Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-44228 Required Action: For all affected software assets for which updates exist, the only acceptable remediation actions ar