You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
23 KiB
23 KiB
CISA Log4j (CVE-2021-44228) Affected Vendor & Software List
0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Status Descriptions
| Status | Description |
|---|---|
| Unknown | Status unknown. Default choice. |
| Affected | Reported to be affected by CVE-2021-44228. |
| Not Affected | Reported to NOT be affected by CVE-2021-44228 and no further action necessary. |
| Fixed | Patch and/or mitigations available (see provided links). |
| Under Investigation | Vendor investigating status. |
Software List
This list has been populated using information from the following sources:
- Kevin Beaumont
- SwitHak
- National Cyber Security Centre - Netherlands (NCSC-NL)
NOTE: This file is automatically generated. To submit updates, please refer to
CONTRIBUTING.md.
| Vendor | Product | Affected Versions | Patched Versions | Status | Vendor Links | Notes | References | Reporter | Last Updated |
|---|---|---|---|---|---|---|---|---|---|
| MailStore | Unknown | link | cisagov | 2022-01-12 | |||||
| Maltego | Unknown | link | cisagov | 2022-01-12 | |||||
| ManageEngine | AD SelfService Plus | Not Affected | cisagov | 2021-12-27 | |||||
| ManageEngine | Servicedesk Plus | 11305 and below | Affected | link | cisagov | 2021-12-15 | |||
| ManageEngine Zoho | Unknown | link | cisagov | 2022-01-12 | |||||
| ManageEngine Zoho | ADAudit Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | ADManager Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | Analytics Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | Cloud Security Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | DataSecurity Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | EventLog Analyzer | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | Exchange Reporter Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | Log360 | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | Log360 UEBA | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | M365 Manager Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | M365 Security Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| ManageEngine Zoho | RecoveryManager Plus | Unknown | link | cisagov | 2021-12-16 | ||||
| MariaDB | Unknown | link | cisagov | 2022-01-12 | |||||
| MathWorks | All MathWorks general release desktop or server products | Not Affected | link | cisagov | 2022-01-18 | ||||
| MathWorks | MATLAB | Not Affected | link | cisagov | 2022-01-18 | ||||
| Matillion | Matillion ETL | 1.59.10+ | Fixed | link | cisagov | 2022-11-01 | |||
| Matomo | Unknown | link | cisagov | 2022-01-12 | |||||
| Mattermost FocalBoard | Unknown | link | cisagov | 2022-01-12 | |||||
| McAfee | Data Exchange Layer (DXL) Client | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Data Loss Prevention (DLP) Discover | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Data Loss Prevention (DLP) Endpoint for Mac | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Data Loss Prevention (DLP) Endpoint for Windows | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Data Loss Prevention (DLP) Monitor | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Data Loss Prevention (DLP) Prevent | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Endpoint Security (ENS) for Linux | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Endpoint Security (ENS) for Mac | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Endpoint Security (ENS) for Windows | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Enterprise Security Manager (ESM) | 11.5.3 | Fixed | link | cisagov | 2021-12-20 | |||
| McAfee | ePolicy Orchestrator Agent Handlers (ePO-AH) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | ePolicy Orchestrator Application Server (ePO) | 5.10 CU11 | Fixed | link | cisagov | 2021-12-20 | |||
| McAfee | Host Intrusion Prevention (Host IPS) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Management of Native Encryption (MNE) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Active Response (MAR) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Agent (MA) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Application and Change Control (MACC) for Linux | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Application and Change Control (MACC) for Windows | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Client Proxy (MCP) for Mac | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Client Proxy (MCP) for Windows | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Drive Encryption (MDE) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Security for Microsoft Exchange (MSME) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Security for Microsoft Exchange (MSME) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | McAfee Security for Microsoft SharePoint (MSMS) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Network Security Manager (NSM) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Network Security Platform (NSP) | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Policy Auditor | Unknown | cisagov | 2021-12-20 | |||||
| McAfee | Threat Intelligence Exchange (TIE) | Unknown | link | Latest status in linked Security Bulletin | cisagov | 2021-12-20 | |||
| McAfee | Web Gateway (MWG) | Unknown | link | cisagov | 2021-12-20 | ||||
| Medtronic | Unknown | link | cisagov | 2021-12-21 | |||||
| MEINBERG | Unknown | link | cisagov | 2022-01-12 | |||||
| MEINBERG | LANTIME and microSync | Unknown | link | cisagov | 2022-01-05 | ||||
| Meltano | Meltano | Unknown | link | Project is written in Python | cisagov | 2022-01-12 | |||
| Memurai | Unknown | link | cisagov | 2022-01-12 | |||||
| Micro Focus | Data Protector | 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.90, 10.91, 11.00 | Fixed | link | https://portal.microfocus.com/s/article/KM000003050 | cisagov | 2021-12-13 | ||
| Microsoft | Azure API Gateway | Unknown | link | cisagov | 2022-01-12 | ||||
| Microsoft | Azure Application Gateway | Unknown | link | cisagov | 2022-01-12 | ||||
| Microsoft | Azure Data lake store java | < 2.3.10 | Affected | link | cisagov | 2022-01-12 | |||
| Microsoft | Azure Data lake store java | < 2.3.10 | Affected | link | cisagov | 2022-01-12 | |||
| Microsoft | Azure DevOps | Unknown | link | cisagov | 2022-01-12 | ||||
| Microsoft | Azure DevOps Server | 2019.0 - 2020.1 | Affected | link | cisagov | 2022-01-12 | |||
| Microsoft | Azure Traffic Manager | Unknown | link | cisagov | 2022-01-12 | ||||
| Microsoft | Team Foundation Server | 2018.2+ | Affected | link | cisagov | 2022-01-12 | |||
| Microstrategy | Unknown | link | cisagov | 2022-01-12 | |||||
| Midori Global | Unknown | link | cisagov | 2022-01-12 | |||||
| Mikrotik | Unknown | link | cisagov | 2022-01-12 | |||||
| Milestone sys | Unknown | link | cisagov | 2022-01-12 | |||||
| Mimecast | Unknown | link | cisagov | 2022-01-12 | |||||
| Minecraft | Unknown | link | cisagov | 2022-01-12 | |||||
| Mirantis | Unknown | link | cisagov | 2022-01-12 | |||||
| Miro | Unknown | link | cisagov | 2022-01-12 | |||||
| Mitel | Unknown | link | cisagov | 2022-01-12 | |||||
| Mitsubishi Electric Corporation | CC-Link IE TSN | <=1.02C | Affected | link | Product number: SW1DNN-GN610SRC-M | cisagov | 2022-03-31 | ||
| Mitsubishi Electric Corporation | CC-Link IE TSN | 1.12F | Fixed | link | Product number: SW1DNN-GN610SRC-M | cisagov | 2022-03-31 | ||
| MMM Group | Control software of all MMM series | Unknown | link | cisagov | 2022-01-05 | ||||
| MMM Group | RUMED360 Cycles, RUMED360 Cycles View, RUMED360 Sicon, RUMED360 ISA-Server | Unknown | link | cisagov | 2022-01-05 | ||||
| MongoDB | All other components of MongoDB Atlas (including Atlas Database, Data Lake, Charts) | Unknown | link | cisagov | 2022-01-12 | ||||
| MongoDB | MongoDB Atlas Search | Unknown | link | cisagov | 2022-01-12 | ||||
| MongoDB | MongoDB Community Edition (including Community Server, Cloud Manager, Community Kubernetes Operators) | Unknown | link | cisagov | 2022-01-12 | ||||
| MongoDB | MongoDB Drivers | Unknown | link | cisagov | 2022-01-12 | ||||
| MongoDB | MongoDB Enterprise Advanced (including Enterprise Server, Ops Manager, Enterprise Kubernetes Operators) | Unknown | link | cisagov | 2022-01-12 | ||||
| MongoDB | MongoDB Realm (including Realm Database, Sync, Functions, APIs) | Unknown | link | cisagov | 2022-01-12 | ||||
| MongoDB | MongoDB Tools (including Compass, Database Shell, VS Code Plugin, Atlas CLI, Database Connectors) | Unknown | link | cisagov | 2022-01-12 | ||||
| Moodle | Unknown | link | cisagov | 2022-01-12 | |||||
| MoogSoft | Unknown | link | cisagov | 2022-01-12 | |||||
| Motorola Avigilon | Unknown | link | cisagov | 2022-01-12 | |||||
| Moxa | Not Affected | link | Moxa is investigating to determine if any of our products are affected by this vulnerability. At the time of publication, none of Moxa's products are affected. | cisagov | 2022-01-19 | ||||
| Mulesoft | Unknown | link | This advisory is available to customers only and has not been reviewed by CISA | cisagov | 2022-01-12 | ||||
| Mulesoft | Anypoint Studio | 7.x | Affected | link | This advisory is available to account holders only and has not been reviewed by CISA. | cisagov | 2021-12-15 | ||
| Mulesoft | Cloudhub | Unknown | link | This advisory is available to account holders only and has not been reviewed by CISA. | cisagov | 2021-12-15 | |||
| Mulesoft | Mule Agent | 6.x | Affected | link | This advisory is available to account holders only and has not been reviewed by CISA. | cisagov | 2021-12-15 | ||
| Mulesoft | Mule Runtime | 3.x, 4.x | Affected | link | This advisory is available to account holders only and has not been reviewed by CISA. | cisagov | 2021-12-15 |