---
version: '1.0'
owners:
  - name: cisagov
    url: https://github.com/cisagov/log4j-affected-db
software:
  - vendor: 1Password
    product: All products
    cves:
      cve-2021-4104:
        investigated: true
        affected_versions: []
        fixed_versions: []
        unaffected_versions:
          - '>= 1.0.0'
      cve-2021-44228:
        investigated: true
        affected_versions: []
        fixed_versions: []
        unaffected_versions:
          - '>= 1.0.0'
      cve-2021-45046:
        investigated: true
        affected_versions: []
        fixed_versions: []
        unaffected_versions:
          - '>= 1.0.0'
      cve-2021-45105:
        investigated: true
        affected_versions: []
        fixed_versions: []
        unaffected_versions:
          - '>= 1.0.0'
    vendor_links:
      - https://support.1password.com/kb/202112/
    notes: ''
    references:
      - ''
    last_updated: '2021-01-14T00:00:00'
  - vendor: 2n
    product: ''
    cves:
      cve-2021-4104:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-44228:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45046:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45105:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
    vendor_links:
      - https://www.2n.com/cs_CZ/novinky/produkty-2n-neohrozuje-zranitelnost-cve-2021-44228-komponenty-log4j-2
    notes: ''
    references:
      - ''
    last_updated: '2022-01-12T07:18:50+00:00'
  - vendor: 3CX
    product: ''
    cves:
      cve-2021-4104:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-44228:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45046:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45105:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
    vendor_links:
      - https://www.3cx.com/community/threads/log4j-vulnerability-cve-2021-44228.86436/#post-407911
    notes: ''
    references:
      - ''
    last_updated: '2022-01-12T07:18:50+00:00'
  - vendor: 3M Health Information Systems
    product: CGS
    cves:
      cve-2021-4104:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-44228:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45046:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45105:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
    vendor_links:
      - https://support.3mhis.com/app/account/updates/ri/5210
    notes: This advisory is available to customer only and has not been reviewed by
      CISA.
    references:
      - ''
    last_updated: '2021-12-15T00:00:00'
  - vendor: 7-Zip
    product: ''
    cves:
      cve-2021-4104:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-44228:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45046:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45105:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
    vendor_links:
      - https://sourceforge.net/p/sevenzip/discussion/45797/thread/b977bbd4d1
    notes: ''
    references:
      - ''
    last_updated: '2022-01-12T07:18:50+00:00'
  - vendor: 7Signal
    product: Sapphire
    cves:
      cve-2021-4104:
        investigated: true
        affected_versions: []
        fixed_versions: []
        unaffected_versions:
          - ''
      cve-2021-44228:
        investigated: true
        affected_versions: []
        fixed_versions:
          - ''
        unaffected_versions: []
      cve-2021-45046:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
      cve-2021-45105:
        investigated: false
        affected_versions: []
        fixed_versions: []
        unaffected_versions: []
    vendor_links:
      - https://www.7signal.com/info/se-release-notes
    notes: Fix released 2021-12-14
    references:
      - ''
    last_updated: '2021-12-14T00:00:00'
...