CISA Log4j (CVE-2021-44228) Affected Vendor & Software List

Status Descriptions

Status	Description
Unknown	Status unknown. Default choice.
Affected	Reported to be affected by CVE-2021-44228.
Not Affected	Reported to NOT be affected by CVE-2021-44228 and no further action necessary.
Fixed	Patch and/or mitigations available (see provided links).
Under Investigation	Vendor investigating status.

Software List

This list has been populated using information from the following sources:

Kevin Beaumont
SwitHak
NCSC-NL

NOTE: This file is automatically generated. To submit updates, please refer to CONTRIBUTING.md.

Vendor	Product	Affected Versions	Patched Versions	Status	Vendor Links	Notes	References	Reporter	Last Updated
1Password	All products			Not Affected	link			cisagov	2021-01-14
2n				Unknown	link			cisagov	2022-01-12
3CX				Unknown	link			cisagov	2022-01-12
3M Health Information Systems	CGS			Unknown	link	This advisory is available to customer only and has not been reviewed by CISA.		cisagov	2021-12-15
7-Zip				Unknown	link			cisagov	2022-01-12
7Signal	Sapphire			Fixed	link	Fix released 2021-12-14		cisagov	2021-12-14
ABB				Unknown	link			cisagov	2022-01-12
ABB	ABB Remote Service	ABB Remote Platform (RAP)		Affected				cisagov	2022-01-12
ABB	AlarmInsight Cloud	AlarmInsight KPI Dashboards 1.0.0		Affected				cisagov	2022-01-12
ABB	B&R Products	See Vendor Advisory		Affected	link			cisagov	2022-01-12
Abbott				Unknown	link			cisagov	2021-12-15
Abnormal Security	Abnormal Security			Unknown	link			cisagov	2022-01-12
Accellence				Unknown	link			cisagov	2022-01-12
Accellion	Kiteworks		v7.6 release	Fixed	link	"As a precaution, Kiteworks released a 7.6.1 Hotfix software update to address the vulnerability. This patch release adds the mitigation for CVE-2021-44228 contained in the Solr package as recommended by Apache Solr group. Specifically, it updates the Log4j library to a non-vulnerable version on CentOS 7 systems as well as adds the recommended option “$SOLR_OPTS -Dlog4j2.formatMsgNoLookups=true” to disable the possible attack vector on both CentOS 6 and CentOS 7."		cisagov	2021-12-16
Acquia				Unknown	link			cisagov	2022-01-12
Acronis				Unknown	link			cisagov	2022-01-12
ActiveState				Unknown	link			cisagov	2022-01-12
Adaptec				Unknown	link			cisagov	2022-01-12
Addigy				Unknown	link			cisagov	2022-01-12
Adeptia				Unknown	link			cisagov	2022-01-12
Adobe ColdFusion				Unknown	link			cisagov	2022-01-12
ADP				Unknown	link			cisagov	2022-01-12
Advanced Micro Devices (AMD)	All			Not Affected	link			cisagov	2022-02-02
Advanced Systems Concepts (formally Jscape)	Active MFT			Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2021-12-14
Advanced Systems Concepts (formally Jscape)	MFT			Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2021-12-14
Advanced Systems Concepts (formally Jscape)	MFT Gateway			Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2021-12-14
Advanced Systems Concepts (formally Jscape)	MFT Server			Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2021-12-14
AFAS Software				Unknown	link			cisagov	2022-01-12
AFHCAN Global LLC	AFHCANcart			Not Affected	link			cisagov	2022-01-12
AFHCAN Global LLC	AFHCANmobile			Not Affected	link			cisagov	2022-01-12
AFHCAN Global LLC	AFHCANServer			Not Affected	link			cisagov	2022-01-12
AFHCAN Global LLC	AFHCANsuite			Not Affected	link			cisagov	2022-01-12
AFHCAN Global LLC	AFHCANupdate			Not Affected	link			cisagov	2022-01-12
AFHCAN Global LLC	AFHCANweb			Not Affected	link			cisagov	2022-01-12
Agilysys				Unknown	link			cisagov	2022-01-12
Akamai	SIEM Splunk Connector	All		Affected	link	v1.4.11 is the new recommendation for mitigation of log4j vulnerabilities		cisagov	2021-12-15
Alcatel				Unknown	link			cisagov	2022-01-12
Alertus				Unknown	link			cisagov	2022-01-12
Alexion				Unknown	link			cisagov	2022-01-12
Alfresco				Unknown	link			cisagov	2022-01-12
AlienVault				Unknown	link			cisagov	2022-01-12
Alphatron Medical				Unknown	link			cisagov	2022-01-12
Amazon	Athena			Unknown	link			cisagov	2022-01-12
Amazon	AWS			Not Affected		Notes: Amazon Linux 1 had aws apitools which were Java based but these were deprecated in 2015 AWS Forum. AMIs used to inspect and verify (base spin ups) - amzn-ami-hvm-2018.03.0.20200318.1-x86_64-gp2 and amzn2-ami-kernel-5.10-hvm-2.0.20211201.0-x86_64-gp2		cisagov	2021-12-15
Amazon	AWS API Gateway		All	Fixed	link			cisagov	2021-12-20
Amazon	AWS CloudHSM	< 3.4.1.		Affected	link			cisagov	2022-01-12
Amazon	AWS Connect		All	Fixed	link	Vendors recommend evaluating components of the environment outside of the Amazon Connect service boundary, which may require separate/additional customer mitigation		cisagov	2021-12-23
Amazon	AWS DynamoDB		Unknown	Fixed	link			cisagov	2021-12-17
Amazon	AWS EKS, ECS, Fargate	Unknown		Affected	link	To help mitigate the impact of the open-source Apache “Log4j2" utility (CVE-2021-44228 and CVE-2021-45046) security issues on customers’ containers, Amazon EKS, Amazon ECS, and AWS Fargate are deploying a Linux-based update (hot-patch). This hot-patch will require customer opt-in to use, and disables JNDI lookups from the Log4J2 library in customers’ containers. These updates are available as an Amazon Linux package for Amazon ECS customers, as a DaemonSet for Kubernetes users on AWS, and will be in supported AWS Fargate platform versions		cisagov	2021-12-16
Amazon	AWS ElastiCache		Unknown	Fixed	link			cisagov	2021-12-17
Amazon	AWS ELB		Unknown	Fixed	link			cisagov	2021-12-16
Amazon	AWS Inspector		Unknown	Fixed	link			cisagov	2021-12-17
Amazon	AWS Kinesis Data Stream	Unknown		Affected	link	We are actively patching all sub-systems that use Log4j2 by applying updates. The Kinesis Client Library (KCL) version 2.X and the Kinesis Producer Library (KPL) are not impacted. For customers using KCL 1.x, we have released an updated version and we strongly recommend that all KCL version 1.x customers upgrade to KCL version 1.14.5 (or higher)		cisagov	2021-12-14
Amazon	AWS Lambda	Unknown		Affected	link			cisagov	2022-01-12
Amazon	AWS Lambda	Unknown		Affected	link			cisagov	2022-01-12
Amazon	AWS RDS		Unknown	Fixed	link	Amazon RDS and Amazon Aurora have been updated to mitigate the issues identified in CVE-2021-44228		cisagov	2021-12-17
Amazon	AWS S3		Unknown	Fixed	link			cisagov	2021-12-14
Amazon	AWS SNS		Unknown	Fixed	link	Amazon SNS systems that serve customer traffic are patched against the Log4j2 issue. We are working to apply the Log4j2 patch to sub-systems that operate separately from SNS’s systems that serve customer traffic		cisagov	2021-12-14
Amazon	AWS SQS		Unknown	Fixed	link			cisagov	2021-12-15
Amazon	CloudFront			Unknown	link			cisagov	2022-01-12
Amazon	CloudWatch			Unknown	link			cisagov	2022-01-12
Amazon	EC2			Not Affected	link			cisagov	2021-12-15
Amazon	ELB			Unknown	link			cisagov	2022-01-12
Amazon	KMS			Unknown	link			cisagov	2022-01-12
Amazon	OpenSearch	Unknown		Affected	link			cisagov	2022-01-12
Amazon	RDS			Unknown	link			cisagov	2022-01-12
Amazon	Route 53			Unknown	link			cisagov	2022-01-12
Amazon	S3			Unknown	link			cisagov	2022-01-12
Amazon	Translate			Unknown	link	Service not identified on AWS Log4j Security Bulletin		cisagov	2022-01-12
Amazon	VPC			Unknown	link			cisagov	2022-01-12
AMD	All			Unknown	link	Currently, no AMD products have been identified as affected. AMD is continuing its analysis.		cisagov	2021-12-22
Anaconda	Anaconda			Not Affected	link			cisagov	2021-12-21
Apache	ActiveMQ Artemis			Not Affected	link	ActiveMQ Artemis does not use Log4j for logging. However, Log4j 1.2.17 is included in the Hawtio-based web console application archive (i.e. web/console.war/WEB-INF/lib). Although this version of Log4j is not impacted by CVE-2021-44228 future versions of Artemis will be updated so that the Log4j jar is no longer included in the web console application archive. See ARTEMIS-3612 for more information on that task.		cisagov	2021-12-21
Apache	Airflow			Unknown	link	Airflow is written in Python		cisagov	2022-01-12
Apache	Camel	3.14.1.3.11.5, 3.7.7		Affected	link	Apache Camel does not directly depend on Log4j 2, so we are not affected by CVE-2021-44228.If you explicitly added the Log4j 2 dependency to your own applications, make sure to upgrade.Apache Camel does use log4j during testing itself, and therefore you can find that we have been using log4j v2.13.3 release in our latest LTS releases Camel 3.7.6, 3.11.4.		cisagov	2021-12-13
Apache	Camel 2			Unknown	link			cisagov	2021-12-13
Apache	Camel JBang	<=3.1.4		Affected	link			cisagov	2021-12-13
Apache	Camel K			Unknown	link			cisagov	2021-12-13
Apache	Camel Karaf			Unknown	link	The Karaf team is aware of this and are working on a new Karaf 4.3.4 release with updated log4j.		cisagov	2021-12-13
Apache	Camel Quarkus			Unknown	link			cisagov	2021-12-13
Apache	CamelKafka Connector			Unknown	link			cisagov	2021-12-13
Apache	Druid	< druid 0.22.0		Affected	link			cisagov	2021-12-12
Apache	Flink		< 1.14.2, 1.13.5, 1.12.7, 1.11.6	Fixed	link	To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases, which were supposed to only contain a Log4j upgrade to 2.15.0, were skipped because CVE-2021-45046 was discovered during the release publication. The new 1.14.2 / 1.13.5 / 1.12.7 / 1.11.6 releases include a version upgrade for Log4j to version 2.16.0 to address CVE-2021-44228 and CVE-2021-45046.	https://flink.apache.org/news/2021/12/16/log4j-patch-releases.html	cisagov	2021-12-12
Apache	Kafka			Not Affected	link	The current DB lists Apache Kafka as impacted. Apache Kafka uses Log4jv1, not v2.		cisagov	2021-12-14
Apache	Kafka	Unknown		Affected	link	Only vulnerable in certain configuration(s)		cisagov	2022-01-12
Apache	Log4j	< 2.15.0		Affected	link			cisagov	2022-01-12
Apache	Solr		7.4.0 to 7.7.3, 8.0.0 to 8.11.0	Fixed	link	Update to 8.11.1 or apply fixes as described in Solr security advisory	Apache Solr 8.11.1 downloads	cisagov	2021-12-16
Apache	Struts 2	Versions before 2.5.28.1		Affected	link	The Apache Struts group is pleased to announce that Struts 2.5.28.1 is available as a “General Availability” release. The GA designation is our highest quality grade. This release addresses Log4j vulnerability CVE-2021-45046 by using the latest Log4j 2.12.2 version (Java 1.7 compatible).	Apache Struts Release Downloads	cisagov	2021-12-21
Apache	Tomcat	9.0.x		Affected	link	Apache Tomcat 9.0.x has no dependency on any version of log4j. Web applications deployed on Apache Tomcat may have a dependency on log4j. You should seek support from the application vendor in this instance. It is possible to configure Apache Tomcat 9.0.x to use log4j 2.x for Tomcat's internal logging. This requires explicit configuration and the addition of the log4j 2.x library. Anyone who has switched Tomcat's internal logging to log4j 2.x is likely to need to address this vulnerability. In most cases, disabling the problematic feature will be the simplest solution. Exactly how to do that depends on the exact version of log4j 2.x being used. Details are provided on the log4j 2.x security page		cisagov	2021-12-21
APC by Schneider Electric	Powerchute Business Edition		v9.5, v10.0.1, v10.0.2, v10.0.3, v10.0.4	Fixed	link	Mitigation instructions to remove the affected class.		cisagov	2021-12-15
APC by Schneider Electric	Powerchute Network Shutdown		4.2, 4.3, 4.4, 4.4.1	Fixed	link	Mitigation instructions to remove the affected class.		cisagov	2021-12-15
Apereo	CAS	6.3.x & 6.4.x		Affected	link			cisagov	2022-01-12
Apereo	Opencast	< 9.10, < 10.6		Affected	link			cisagov	2022-01-12
Apigee				Unknown	link			cisagov	2022-01-12
Apollo				Unknown	link			cisagov	2022-01-12
Appdynamics				Unknown	link			cisagov	2022-01-12
Appeon	PowerBuilder	Appeon PowerBuilder 2017-2021 regardless of product edition		Affected				cisagov	2021-12-15
AppGate				Unknown	link			cisagov	2022-01-12
Appian	Appian Platform		All	Fixed	link			cisagov	2021-12-22
Application Performance Ltd	DBMarlin	Not Affected		Affected				cisagov	2021-12-15
Application Performance Ltd	DBMarlin			Unknown	link			cisagov	2021-12-15
APPSHEET				Unknown	link			cisagov	2022-01-12
Aptible	Aptible	ElasticSearch 5.x		Affected	link			cisagov	2022-01-12
Aqua Security				Unknown	link			cisagov	2022-01-12
Arbiter Systems	All			Unknown	link			cisagov	2021-12-22
ARC Informatique	All			Not Affected	link			cisagov	2022-01-13
Arca Noae				Unknown	link			cisagov	2022-01-12
Arcserve	Arcserve Backup			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	Arcserve Continuous Availability			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	Arcserve Email Archiving			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	Arcserve UDP			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	ShadowProtect			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	ShadowXafe			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	Solo			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
Arcserve	StorageCraft OneXafe			Not Affected	link		https://support.storagecraft.com/s/question/0D51R000089NnT3SAK/does-storagecraft-have-a-publicly-available-response-to-the-log4j-vulnerability-is-there-a-reference-for-any-findings-negative-positive-the-company-has-in-their-investigations-it-seems-it-would-greatly-benefit-support-and-customers-both?language=en_US	cisagov	2021-12-14
ArcticWolf				Unknown	link			cisagov	2022-01-12
Arduino				Unknown	link			cisagov	2022-01-12
Ariba				Unknown	link			cisagov	2022-01-12
Arista				Unknown	link			cisagov	2022-01-12
Aruba Networks				Unknown	link			cisagov	2022-01-12
Ataccama				Unknown	link			cisagov	2022-01-12
Atera				Unknown	link			cisagov	2022-01-12
Atlassian	Bamboo Server & Data Center			Not Affected	link	This product may be affected by a related but lower severity vulnerability if running in a specific non-default configuration.		cisagov	2022-01-12
Atlassian	Bitbucket Server & Data Center	All		Affected	link	This product is not vulnerable to remote code execution but may leak information due to the bundled Elasticsearch component being vulnerable.		cisagov	2022-01-12
Atlassian	Confluence Server & Data Center			Not Affected	link	This product may be affected by a related but lower severity vulnerability if running in a specific non-default configuration.		cisagov	2022-01-12
Atlassian	Crowd Server & Data Center			Not Affected	link	This product may be affected by a related but lower severity vulnerability if running in a specific non-default configuration.		cisagov	2022-01-12
Atlassian	Crucible			Not Affected	link	This product may be affected by a related but lower severity vulnerability if running in a specific non-default configuration.		cisagov	2022-01-12
Atlassian	Fisheye			Not Affected	link	This product may be affected by a related but lower severity vulnerability if running in a specific non-default configuration.		cisagov	2022-01-12
Atlassian	Jira Server & Data Center			Not Affected	link	This product may be affected by a related but lower severity vulnerability if running in a specific non-default configuration.		cisagov	2022-01-12
Attivo networks				Unknown	link			cisagov	2022-01-12
Atvise	All			Not Affected	link	The security vulnerability does NOT affect our applications and products or pose any threat. This applies to all Bachmann applications and products, including atvise solutions.		cisagov	2022-01-17
AudioCodes				Unknown	link			cisagov	2022-01-12
Autodesk				Unknown	link	Autodesk is continuing to perform a thorough investigation in relation to the recently discovered Apache Log4j security vulnerabilities. We continue to implement several mitigating factors for our products including patching, network firewall blocks, and updated detection signatures to reduce the threat of this vulnerability and enhance our ability to quickly respond to potential malicious activity. We have not identified any compromised systems in the Autodesk environment due to this vulnerability, at this time. This is an ongoing investigation and we will provide updates on the Autodesk Trust Center as we learn more.		cisagov	2021-12-21
Automox				Unknown	link			cisagov	2022-01-12
Autopsy				Unknown	link			cisagov	2022-01-12
Auvik				Unknown	link			cisagov	2022-01-12
Avantra SYSLINK				Unknown	link			cisagov	2022-01-12
Avaya	Avaya Analytics	3.5, 3.6, 3.6.1, 3.7, 4		Affected	link			cisagov	2021-12-14
Avaya	Avaya Aura for OneCloud Private			Unknown	link	Avaya is scanning and monitoring its OneCloud Private environments as part of its management activities. Avaya will continue to monitor this fluid situation and remediations will be made as patches become available, in accordance with appropriate change processes.		cisagov	2021-12-14
Avaya	Avaya Aura® Application Enablement Services	8.1.3.2, 8.1.3.3, 10.1		Affected	link		PSN020551u	cisagov	2021-12-14
Avaya	Avaya Aura® Contact Center	7.0.2, 7.0.3, 7.1, 7.1.1, 7.1.2		Affected	link			cisagov	2021-12-14
Avaya	Avaya Aura® Device Services	8, 8.1, 8.1.4, 8.1.5		Affected	link			cisagov	2021-12-14
Avaya	Avaya Aura® Device Services	8.0.1, 8.0.2, 8.1.3		Affected	link			cisagov	2021-12-14
Avaya	Avaya Aura® Media Server	8.0.0, 8.0.1, 8.0.2		Affected	link		PSN020549u	cisagov	2021-12-14
Avaya	Avaya Aura® Presence Services	10.1, 7.1.2, 8, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4		Affected	link			cisagov	2021-12-14
Avaya	Avaya Aura® Session Manager	10.1, 7.1.3, 8, 8.0.1, 8.1, 8.1.1, 8.1.2, 8.1.3		Affected	link		PSN020550u	cisagov	2021-12-14
Avaya	Avaya Aura® System Manager	10.1, 8.1.3		Affected	link		PSN005565u	cisagov	2021-12-14
Avaya	Avaya Aura® Web Gateway	3.11[P], 3.8.1[P], 3.8[P], 3.9.1 [P], 3.9[P]		Affected	link			cisagov	2021-12-14
Avaya	Avaya Breeze™	3.7, 3.8, 3.8.1		Affected	link			cisagov	2021-12-14
Avaya	Avaya Contact Center Select	7.0.2, 7.0.3, 7.1, 7.1.1, 7.1.2		Affected	link			cisagov	2021-12-14
Avaya	Avaya CRM Connector - Connected Desktop	2.2		Affected	link			cisagov	2021-12-14
Avaya	Avaya Device Enablement Service	3.1.22		Affected	link			cisagov	2021-12-14
Avaya	Avaya Meetings	9.1.10, 9.1.11, 9.1.12		Affected	link			cisagov	2021-12-14
Avaya	Avaya one cloud private -UCaaS - Mid Market Aura	1		Affected	link			cisagov	2021-12-14
Avaya	Avaya OneCloud-Private	2		Affected	link			cisagov	2021-12-14
Avaya	Avaya Session Border Controller for Enterprise	8.0.1, 8.1, 8.1.1, 8.1.2, 8.1.3		Affected	link		PSN020554u	cisagov	2021-12-14
Avaya	Avaya Social Media Hub			Unknown	link			cisagov	2021-12-14
Avaya	Avaya Workforce Engagement	5.3		Affected	link			cisagov	2021-12-14
Avaya	Business Rules Engine	3.4, 3.5, 3.6, 3.7		Affected	link			cisagov	2021-12-14
Avaya	Callback Assist	5, 5.0.1		Affected	link			cisagov	2021-12-14
Avaya	Control Manager	9.0.2, 9.0.2.1		Affected	link			cisagov	2021-12-14
Avaya	Device Enrollment Service	3.1		Affected	link			cisagov	2021-12-14
Avaya	Equinox™ Conferencing	9.1.2		Affected	link			cisagov	2021-12-14
Avaya	Interaction Center	7.3.9		Affected	link			cisagov	2021-12-14
Avaya	IP Office™ Platform	11.0.4, 11.1, 11.1.1, 11.1.2		Affected	link			cisagov	2021-12-14
Avaya	Proactive Outreach Manager	3.1.2, 3.1.3, 4, 4.0.1		Affected	link			cisagov	2021-12-14
AVEPOINT				Unknown	link			cisagov	2022-01-12
AVM				Unknown	link			cisagov	2022-01-12
AvTech RoomAlert				Unknown	link			cisagov	2022-01-12
AWS New				Unknown	link			cisagov	2022-01-12
AXON				Unknown	link			cisagov	2022-01-12
AXS Guard				Unknown	link			cisagov	2022-01-12
Axways Applications				Unknown	link			cisagov	2022-01-12
B&R Industrial Automation	APROL			Unknown	link			cisagov	2021-12-16
BackBox				Unknown	link			cisagov	2022-01-12
Balbix				Unknown	link			cisagov	2022-01-12
Baramundi Products				Unknown	link			cisagov	2022-01-12
Barco				Unknown	link			cisagov	2022-01-12
Barracuda				Unknown	link			cisagov	2022-01-12
Baxter				Unknown	link			cisagov	2021-12-20
BBraun	APEX® Compounder			Not Affected	link			cisagov	2022-01-31
BBraun	DoseTrac® Server, DoseLink™ Server, and Space® Online Suite Server software		All	Fixed	link			cisagov	2022-01-31
BBraun	Outlook® Safety Infusion System Pump family			Not Affected	link			cisagov	2022-01-31
BBraun	Pinnacle® Compounder			Not Affected	link			cisagov	2022-01-31
BBraun	Pump, SpaceStation, and Space® Wireless Battery)			Not Affected	link			cisagov	2022-01-31
BBraun	Space® Infusion Pump family (Infusomat® Space® Infusion Pump, Perfusor® Space® Infusion			Not Affected	link			cisagov	2022-01-31
BD	Arctic Sun™ Analytics			Unknown	link			cisagov	2021-12-20
BD	BD Diabetes Care App Cloud			Unknown	link			cisagov	2021-12-20
BD	BD HealthSight™ Clinical Advisor			Unknown	link			cisagov	2021-12-20
BD	BD HealthSight™ Data Manager			Unknown	link			cisagov	2021-12-20
BD	BD HealthSight™ Diversion Management			Unknown	link			cisagov	2021-12-20
BD	BD HealthSight™ Infection Advisor			Unknown	link			cisagov	2021-12-20
BD	BD HealthSight™ Inventory Optimization Analytics			Unknown	link			cisagov	2021-12-20
BD	BD HealthSight™ Medication Safety			Unknown	link			cisagov	2021-12-20
BD	BD Knowledge Portal for BD Pyxis™ Supply			Unknown	link			cisagov	2021-12-20
BD	BD Knowledge Portal for Infusion Technologies			Unknown	link			cisagov	2021-12-20
BD	BD Knowledge Portal for Medication Technologies			Unknown	link			cisagov	2021-12-20
BD	BD Synapsys™ Informatics Solution			Unknown	link			cisagov	2021-12-20
BD	BD Veritor™ COVID At Home Solution Cloud			Unknown	link			cisagov	2021-12-20
Beckman Coulter	Access 2 (Immunoassay System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Ac•T 5diff (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Ac•T Family (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AU2700 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AU480 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AU5400 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AU5800 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AU640 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AU680 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AutoMate 1200 (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AutoMate 1250 (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AutoMate 2500 (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	AutoMate 2550 (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxA 5000 (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxA 5000 Fit (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 500 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 520 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 560 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 600 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 690T (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 800 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH 900 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH SMS (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxH SMS II (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxM Autoplak (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxM WalkAway 1040 (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxM WalkAway 1096 (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxONE Command Central (Information Systems)		All	Fixed	link	Customers can follow instructions to remove log4j		cisagov	2022-01-31
Beckman Coulter	DxONE Insights (Information Systems)			Fixed	link	Patch has been applied.		cisagov	2022-01-31
Beckman Coulter	DxONE Inventory Manager (Information Systems)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxONE Workflow Manager (Information Systems)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxU Workcell (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxUc (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	DxUm (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	HighFlexX Software (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	HmX (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	HmX AL (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	iChemVELOCITY (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	IMMAGE 800 (Nephelometry)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Intelligent Sample Banking ISB (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Ipaw (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	iQ Workcell (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	iQ200 (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	iRICELL (Urinalysis)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	LabPro Workstation and Database Computers Provided by Beckman Coulter (Microbiology)	All		Affected	link	The only known instance of vulnerability due to Log4J is using Axeda services		cisagov	2022-01-31
Beckman Coulter	LH 500 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	LH Slidemaker (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	LH Slidestraine (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	LH750 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	LH780 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	LH785 (Hematology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	MicroScan autoSCAN-4 (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	PK7300 (Blood Bank)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	PK7400 (Blood Bank)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Power Express (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Power Link (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Power Processor (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	PROService (Information Systems)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	RAP Box (Information Systems)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	REMISOL ADVANCE (Information Systems)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Sorting Drive (Lab Automation)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Unicel DxC 600 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Unicel DxC 800 (Chemistry System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Unicel DxI 600 (Immunoassay System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	Unicel DxI 800 (Immunoassay System)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	WalkAway 40 plus (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	WalkAway 40 SI (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	WalkAway 96 plus (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beckman Coulter	WalkAway 96 SI (Microbiology)			Not Affected	link			cisagov	2022-01-31
Beijer Electronics	acirro+			Unknown	link			cisagov	2021-12-22
Beijer Electronics	BFI frequency inverters			Unknown	link			cisagov	2021-12-22
Beijer Electronics	BSD servo drives			Unknown	link			cisagov	2021-12-22
Beijer Electronics	CloudVPN			Unknown	link			cisagov	2021-12-22
Beijer Electronics	FnIO-G and M Distributed IO			Unknown	link			cisagov	2021-12-22
Beijer Electronics	iX Developer			Unknown	link			cisagov	2021-12-22
Beijer Electronics	Nexto modular PLC			Unknown	link			cisagov	2021-12-22
Beijer Electronics	Nexto Xpress compact controller			Unknown	link			cisagov	2021-12-22
Beijer Electronics	WARP Engineering Studio			Unknown	link			cisagov	2021-12-22
Bender				Unknown	link			cisagov	2022-01-12
Best Practical Request Tracker (RT) and Request Tracker for Incident Response (RTIR)				Unknown	link			cisagov	2022-01-12
BeyondTrust	Privilege Management Cloud		Unknown	Fixed	link			cisagov	2021-12-17
BeyondTrust	Privilege Management Reporting in BeyondInsight		21.2	Fixed	link			cisagov	2021-12-17
BeyondTrust	Secure Remote Access appliances			Not Affected	link			cisagov	2021-12-17
BeyondTrust Bomgar				Unknown	link			cisagov	2022-01-12
BioMerieux				Unknown	link			cisagov	2021-12-22
BisectHosting				Unknown	link			cisagov	2022-01-12
BitDefender				Unknown	link			cisagov	2022-01-12
BitNami By VMware				Unknown	link			cisagov	2022-01-12
BitRise				Unknown	link			cisagov	2022-01-12
Bitwarden				Unknown	link			cisagov	2022-01-12
Biztory	Fivetran			Unknown	link		Vendor review indicated Fivetran is not vulnerable to Log4j2	cisagov	2022-01-12
Black Kite				Unknown	link			cisagov	2022-01-12
Blancco				Unknown	link			cisagov	2022-01-12
Blumira				Unknown	link			cisagov	2022-01-12
BMC	Bladelogic Database Automation			Unknown	link			cisagov	2022-01-12
BMC	BMC AMI Ops			Unknown	link			cisagov	2022-01-12
BMC	BMC AMI Products			Unknown	link			cisagov	2022-01-12
BMC	BMC Compuware			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Automation Console			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Business Workflows			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Client Management			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Cloud Cost			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Cloud Security			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix CMDB			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Continuous Optimization			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Control-M			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Digital Workplace			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Discovery			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix ITSM			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Knowledge Management			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Operations Management with AIOps			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Platform			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix platform			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Remediate			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Remediate			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Remedyforce			Unknown	link			cisagov	2022-01-12
BMC	BMC Helix Virtual Agent			Unknown	link			cisagov	2022-01-12
BMC	Cloud Lifecycle Management			Unknown	link			cisagov	2022-01-12
BMC	Control-M			Unknown	link			cisagov	2022-01-12
BMC	Footprints			Unknown	link			cisagov	2022-01-12
BMC	MainView Middleware Administrator			Unknown	link			cisagov	2022-01-12
BMC	MainView Middleware Monitor			Unknown	link			cisagov	2022-01-12
BMC	Remedy ITSM (IT Service Management)			Unknown	link			cisagov	2022-01-12
BMC	SmartIT			Unknown	link			cisagov	2022-01-12
BMC	Track-It!			Unknown	link			cisagov	2022-01-12
BMC	TrueSight Automation for Networks			Unknown	link			cisagov	2022-01-12
BMC	TrueSight Automation for Servers			Unknown	link			cisagov	2022-01-12
BMC	TrueSight Capacity Optimization			Unknown	link			cisagov	2022-01-12
BMC	TrueSight Infrastructure Management			Unknown	link			cisagov	2022-01-12
BMC	TrueSight Operations Management			Unknown	link			cisagov	2022-01-12
BMC	TrueSight Orchestration			Unknown	link			cisagov	2022-01-12
Bosch				Unknown	link			cisagov	2021-12-22
Boston Scientific				Unknown	link			cisagov	2021-12-20
Box				Unknown	link			cisagov	2022-01-12
Brainworks				Unknown	link			cisagov	2022-01-12
BrightSign				Unknown	link			cisagov	2022-01-12
Broadcom	Advanced Secure Gateway (ASG)			Unknown	link			cisagov	2022-01-12
Broadcom	Automic Automation			Unknown	link			cisagov	2022-01-12
Broadcom	BCAAA			Unknown	link			cisagov	2022-01-12
Broadcom	CA Advanced Authentication	9.1		Affected				cisagov	2022-01-12
Broadcom	CA Risk Authentication			Unknown				cisagov	2022-01-12
Broadcom	CA Strong Authentication			Unknown				cisagov	2022-01-12
Broadcom	Cloud Workload Protection (CWP)			Unknown	link			cisagov	2022-01-12
Broadcom	Cloud Workload Protection for Storage (CWP:S)			Unknown	link			cisagov	2022-01-12
Broadcom	CloudSOC Cloud Access Security Broker (CASB)			Unknown	link			cisagov	2022-01-12
Broadcom	Content Analysis (CA)			Unknown	link			cisagov	2022-01-12
Broadcom	Critical System Protection (CSP)			Unknown	link			cisagov	2022-01-12
Broadcom	Data Center Security (DCS)			Unknown	link			cisagov	2022-01-12
Broadcom	Data Loss Prevention (DLP)			Unknown	link			cisagov	2022-01-12
Broadcom	Email Security Service (ESS)			Unknown	link			cisagov	2022-01-12
Broadcom	Ghost Solution Suite (GSS)			Unknown	link			cisagov	2022-01-12
Broadcom	HSM Agent			Unknown	link			cisagov	2022-01-12
Broadcom	Industrial Control System Protection (ICSP)			Unknown	link			cisagov	2022-01-12
Broadcom	Integrated Cyber Defense Manager (ICDm)			Unknown	link			cisagov	2022-01-12
Broadcom	Integrated Secure Gateway (ISG)			Unknown	link			cisagov	2022-01-12
Broadcom	IT Management Suite			Unknown	link			cisagov	2022-01-12
Broadcom	Layer7 API Developer Portal			Unknown	link			cisagov	2022-01-12
Broadcom	Layer7 API Gateway			Unknown	link			cisagov	2022-01-12
Broadcom	Layer7 Mobile API Gateway			Unknown	link			cisagov	2022-01-12
Broadcom	Management Center (MC)			Unknown	link			cisagov	2022-01-12
Broadcom	PacketShaper (PS) S-Series			Unknown	link			cisagov	2022-01-12
Broadcom	PolicyCenter (PC) S-Series			Unknown	link			cisagov	2022-01-12
Broadcom	Privileged Access Manager			Unknown	link			cisagov	2022-01-12
Broadcom	Privileged Access Manager Server Control			Unknown	link			cisagov	2022-01-12
Broadcom	Privileged Identity Manager			Unknown	link			cisagov	2022-01-12
Broadcom	ProxySG			Unknown	link			cisagov	2022-01-12
Broadcom	Reporter			Unknown	link			cisagov	2022-01-12
Broadcom	Secure Access Cloud (SAC)			Unknown	link			cisagov	2022-01-12
Broadcom	Security Analytics (SA)			Unknown	link			cisagov	2022-01-12
Broadcom	SiteMinder (CA Single Sign-On)			Unknown	link			cisagov	2022-01-12
Broadcom	SSL Visibility (SSLV)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Control Compliance Suite (CCS)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Directory			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Endpoint Detection and Response (EDR)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Endpoint Encryption (SEE)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Endpoint Protection (SEP)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Endpoint Protection (SEP) for Mobile			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Endpoint Protection Manager (SEPM)	14.3		Affected	link			cisagov	2022-01-12
Broadcom	Symantec Identity Governance and Administration (IGA)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Mail Security for Microsoft Exchange (SMSMSE)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Messaging Gateway (SMG)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec PGP Solutions			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Protection Engine (SPE)			Unknown	link			cisagov	2022-01-12
Broadcom	Symantec Protection for SharePoint Servers (SPSS)			Unknown	link			cisagov	2022-01-12
Broadcom	VIP			Unknown	link			cisagov	2022-01-12
Broadcom	VIP Authentication Hub			Unknown	link			cisagov	2022-01-12
Broadcom	Web Isolation (WI)			Unknown	link			cisagov	2022-01-12
Broadcom	Web Security Service (WSS)			Unknown	link			cisagov	2022-01-12
Broadcom	WebPulse			Unknown	link			cisagov	2022-01-12
C4b XPHONE				Unknown	link			cisagov	2022-01-12
Campbell Scientific	All			Unknown	link			cisagov	2021-12-23
Camunda				Unknown	link			cisagov	2022-01-12
Canary Labs	All			Unknown	link			cisagov	2021-12-22
Canon	Canon DR Products CXDI_NE)			Not Affected	link	Such as Omnera, FlexPro, Soltus		cisagov	2022-02-02
Canon	CT Medical Imaging Products			Not Affected	link			cisagov	2022-02-02
Canon	Eye-Care Products			Not Affected	link			cisagov	2022-02-02
Canon	MR Medical Imaging Products			Not Affected	link			cisagov	2022-02-02
Canon	NM Medical Imaging Products			Not Affected	link			cisagov	2022-02-02
Canon	UL Medical Imaging Products			Not Affected	link			cisagov	2022-02-02
Canon	Vitrea Advanced 7.x	All		Affected	link			cisagov	2022-02-02
Canon	VL Alphenix Angio Workstation (AWS)	All		Affected	link			cisagov	2022-02-02
Canon	VL Infinix-i Angio Workstation (AWS)			Not Affected	link			cisagov	2022-02-02
Canon	XR Medical Imaging Products			Not Affected	link			cisagov	2022-02-02
CapStorm	Copystorm			Unknown				cisagov	2021-12-22
CarbonBlack				Unknown	link			cisagov	2022-01-12
Carestream				Unknown	link			cisagov	2021-12-20
Carrier				Unknown	link			cisagov	2022-01-12
CAS genesisWorld				Unknown	link			cisagov	2022-01-12
Cato Networks				Unknown	link			cisagov	2022-01-12
Cepheid	C360			Unknown	link			cisagov	2021-12-20
Cepheid	GeneXpert			Unknown	link			cisagov	2021-12-20
Cerberus FTP				Unknown	link			cisagov	2022-01-12
Chaser Systems	discrimiNAT Firewall			Not Affected	link			cisagov	2022-01-12
Check Point	CloudGuard			Not Affected	link			cisagov	2022-01-12
Check Point	Harmony Endpoint & Harmony Mobile			Not Affected	link			cisagov	2022-01-12
Check Point	Infinity Portal			Unknown	link			cisagov	2022-01-12
Check Point	Quantum Security Gateway			Not Affected	link			cisagov	2022-01-12
Check Point	Quantum Security Management			Not Affected	link	Where used, uses the 1.8.0_u241 version of the JRE that protects against this attack by default.		cisagov	2022-01-12
Check Point	SMB			Not Affected	link			cisagov	2022-01-12
Check Point	ThreatCloud			Unknown	link			cisagov	2022-01-12
CheckMK				Unknown	link			cisagov	2022-01-12
Ciphermail				Unknown	link			cisagov	2022-01-12
CircleCI	CircleCI			Unknown	link			cisagov	2021-12-21
CIS				Unknown	link			cisagov	2022-01-12
Cisco	AppDynamics			Unknown	link			cisagov	2022-01-12
Cisco	Cisco ACI Multi-Site Orchestrator			Unknown	link			cisagov	2022-01-12
Cisco	Cisco ACI Virtual Edge			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Adaptive Security Appliance (ASA) Software			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Advanced Web Security Reporting Application			Unknown	link			cisagov	2022-01-12
Cisco	Cisco AMP Virtual Private Cloud Appliance			Unknown	link			cisagov	2022-01-12
Cisco	Cisco AnyConnect Secure Mobility Client			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Application Policy Infrastructure Controller (APIC)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco ASR 5000 Series Routers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Broadcloud Calling			Unknown	link			cisagov	2022-01-12
Cisco	Cisco BroadWorks			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Catalyst 9800 Series Wireless Controllers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco CloudCenter Suite Admin			Unknown	link			cisagov	2022-01-12
Cisco	Cisco CloudCenter Workload Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Cognitive Intelligence			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Common Services Platform Collector			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Computer Telephony Integration Object Server (CTIOS)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Connected Grid Device Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Connected Mobile Experiences			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Connectivity			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Contact Center Domain Manager (CCDM)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Contact Center Management Portal (CCMP)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Crosswork Change Automation			Unknown	link			cisagov	2022-01-12
Cisco	Cisco CX Cloud Agent Software			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Data Center Network Manager (DCNM)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Defense Orchestrator			Unknown	link			cisagov	2022-01-12
Cisco	Cisco DNA Assurance			Unknown	link			cisagov	2022-01-12
Cisco	Cisco DNA Center			Unknown	link			cisagov	2022-01-12
Cisco	Cisco DNA Spaces			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Elastic Services Controller (ESC)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Emergency Responder			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Enterprise Chat and Email			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Enterprise NFV Infrastructure Software (NFVIS)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Evolved Programmable Network Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Extensible Network Controller (XNC)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Finesse			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Firepower Management Center			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Firepower Threat Defense (FTD)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco GGSN Gateway GPRS Support Node			Unknown	link			cisagov	2022-01-12
Cisco	Cisco HyperFlex System			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Identity Services Engine (ISE)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Integrated Management Controller (IMC) Supervisor			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Intersight			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Intersight Virtual Appliance			Unknown	link			cisagov	2022-01-12
Cisco	Cisco IOS and IOS XE Software			Unknown	link			cisagov	2022-01-12
Cisco	Cisco IoT Field Network Director (formerly Cisco Connected Grid Network Management System)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco IoT Operations Dashboard			Unknown	link			cisagov	2022-01-12
Cisco	Cisco IOx Fog Director			Unknown	link			cisagov	2022-01-12
Cisco	Cisco IP Services Gateway (IPSG)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Kinetic for Cities			Unknown	link			cisagov	2022-01-12
Cisco	Cisco MDS 9000 Series Multilayer Switches			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Meeting Server			Unknown	link			cisagov	2022-01-12
Cisco	Cisco MME Mobility Management Entity			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Modeling Labs			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Network Assessment (CNA) Tool			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Network Assurance Engine			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Network Convergence System 2000 Series			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Network Planner			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Network Services Orchestrator (NSO)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus 5500 Platform Switches			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus 5600 Platform Switches			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus 6000 Series Switches			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus 7000 Series Switches			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus Dashboard (formerly Cisco Application Services Engine)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus Data Broker			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Nexus Insights			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Optical Network Planner			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Packaged Contact Center Enterprise			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Paging Server			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Paging Server (InformaCast)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco PDSN/HA Packet Data Serving Node and Home Agent			Unknown	link			cisagov	2022-01-12
Cisco	Cisco PGW Packet Data Network Gateway			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Policy Suite			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Central for Service Providers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Collaboration Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Collaboration Provisioning			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Infrastructure			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime License Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Network			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Optical for Service Providers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Provisioning			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Prime Service Catalog			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Registered Envelope Service			Unknown	link			cisagov	2022-01-12
Cisco	Cisco SD-WAN vEdge 1000 Series Routers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco SD-WAN vEdge 2000 Series Routers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco SD-WAN vEdge 5000 Series Routers			Unknown	link			cisagov	2022-01-12
Cisco	Cisco SD-WAN vEdge Cloud Router Platform			Unknown	link			cisagov	2022-01-12
Cisco	Cisco SD-WAN vManage			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Secure Network Analytics (SNA), formerly Stealthwatch			Unknown	link			cisagov	2022-01-12
Cisco	Cisco SocialMiner			Unknown	link			cisagov	2022-01-12
Cisco	Cisco System Architecture Evolution Gateway (SAEGW)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco TelePresence Management Suite			Unknown	link			cisagov	2022-01-12
Cisco	Cisco UCS Director			Unknown	link			cisagov	2022-01-12
Cisco	Cisco UCS Performance Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Umbrella			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Attendant Console Advanced			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Attendant Console Business Edition			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Attendant Console Department Edition			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Attendant Console Enterprise Edition			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Attendant Console Premium Edition			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Communications Manager Cloud			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Contact Center Enterprise			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Contact Center Enterprise - Live Data server			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Contact Center Express			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified Intelligent Contact Management Enterprise			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Unified SIP Proxy Software			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Video Surveillance Operations Manager			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Virtual Topology System - Virtual Topology Controller (VTC) VM			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Virtualized Voice Browser			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Vision Dynamic Signage Director			Unknown	link			cisagov	2022-01-12
Cisco	Cisco WAN Automation Engine (WAE)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Web Security Appliance (WSA)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Webex Cloud-Connected UC (CCUC)			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Webex Meetings Server			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Webex Teams			Unknown	link			cisagov	2022-01-12
Cisco	Cisco Wide Area Application Services (WAAS)			Unknown	link			cisagov	2022-01-12
Cisco	Duo			Unknown	link			cisagov	2022-01-12
Cisco	DUO network gateway (on-prem/self-hosted)			Unknown				cisagov	2022-01-12
Cisco	duo network gateway (on-prem/self-hosted)			Unknown				cisagov	2022-01-12
Cisco	Exony Virtualized Interaction Manager (VIM)			Unknown	link			cisagov	2022-01-12
Cisco	Managed Services Accelerator (MSX) Network Access Control Service			Unknown	link			cisagov	2022-01-12
Citrix	Citrix ADC (NetScaler ADC) and Citrix Gateway (NetScaler Gateway)			Not Affected	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix Application Delivery Management (NetScaler MAS)			Not Affected	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix Cloud Connector			Unknown	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix Connector Appliance for Cloud Services			Unknown	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix Content Collaboration (ShareFile Integration) – Citrix Files for Windows, Citrix Files for Mac, Citrix Files for Outlook			Unknown	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix Endpoint Management (Citrix XenMobile Server)			Unknown	link	For CVE-2021-44228 and CVE-2021-45046: Impacted–Customers are advised to apply the latest CEM rolling patch updates listed below as soon as possible to reduce the risk of exploitation. XenMobile Server 10.14 RP2; XenMobile Server 10.13 RP5; and XenMobile Server 10.12 RP10. Note: Customers who have upgraded their XenMobile Server to the updated versions are recommended not to apply the responder policy mentioned in the blog listed below to the Citrix ADC vserver in front of the XenMobile Server as it may impact the enrollment of Android devices. For CVE-2021-45105: Investigation in progress.		cisagov	2021-12-21
Citrix	Citrix Hypervisor (XenServer)			Unknown	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix License Server			Unknown	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix SD-WAN			Not Affected	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	Citrix Virtual Apps and Desktops (XenApp & XenDesktop)			Unknown	link	IMPACTED: Linux VDA (non-LTSR versions only)- CVE-2021-44228 and CVE-2021-45046: Customers are advised to apply the latest update as soon as possible to reduce the risk of exploitation. Linux Virtual Delivery Agent 2112. See the Citrix Statement for additional mitigations. For CVE-2021-45105: Investigation has shown that Linux VDA is not impacted. Nonetheless, the Linux VDA 2112 has been updated (21.12.0.30, released December 20th) to contain Apache log4j version 2.17.0. NOT IMPACTED: Linux VDA LTSR all versions; All other CVAD components.		cisagov	2021-12-21
Citrix	Citrix Workspace App			Not Affected	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Citrix	ShareFile Storage Zones Controller			Unknown	link	Citrix continues to investigate any potential impact on Citrix-managed cloud services. If, as the investigation continues, any Citrix-managed services are found to be affected by this issue, Citrix will take immediate action to remediate the problem. Customers using Citrix-managed cloud services do not need to take any action.		cisagov	2021-12-21
Claris				Unknown	link			cisagov	2022-01-12
Cloudera	AM2CM Tool			Unknown	link			cisagov	2022-01-12
Cloudera	Ambari	Only versions 2.x, 1.x		Affected	link			cisagov	2022-01-12
Cloudera	Arcadia Enterprise	Only version 7.1.x		Affected	link			cisagov	2022-01-12
Cloudera	CDH, HDP, and HDF	Only version 6.x		Affected	link			cisagov	2022-01-12
Cloudera	CDP Operational Database (COD)			Unknown	link			cisagov	2022-01-12
Cloudera	CDP Private Cloud Base	Only version 7.x		Affected	link			cisagov	2022-01-12
Cloudera	CDS 3 Powered by Apache Spark	All versions		Affected	link			cisagov	2022-01-12
Cloudera	CDS 3.2 for GPUs	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Cybersecurity Platform	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Data Engineering (CDE)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Data Engineering (CDE)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Data Flow (CFM)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Data Science Workbench (CDSW)	Only versions 2.x, 3.x		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Data Visualization (CDV)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Data Warehouse (CDW)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Data Warehouse (CDW)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera DataFlow (CDF)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Edge Management (CEM)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Enterprise	Only version 6.x		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Flow Management (CFM)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Machine Learning (CML)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Machine Learning (CML)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Manager (Including Backup Disaster Recovery (BDR) and Replication Manager)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Manager (Including Backup Disaster Recovery (BDR) and Replication Manager)	Only versions 7.0.x, 7.1.x, 7.2.x		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Manager (Including Backup Disaster Recovery (BDR))			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Runtime (including Cloudera Data Hub and all Data Hub templates)	Only versions 7.0.x, 7.1.x, 7.2.x		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Stream Processing (CSP)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Cloudera Streaming Analytics (CSA)			Unknown	link			cisagov	2022-01-12
Cloudera	Cloudera Streaming Analytics (CSA)			Unknown	link			cisagov	2022-01-12
Cloudera	Data Analytics Studio (DAS)			Unknown	link			cisagov	2022-01-12
Cloudera	Data Catalog			Unknown	link			cisagov	2022-01-12
Cloudera	Data Lifecycle Manager (DLM)			Unknown	link			cisagov	2022-01-12
Cloudera	Data Steward Studio (DSS)	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Hortonworks Data Flow (HDF)			Unknown	link			cisagov	2022-01-12
Cloudera	Hortonworks Data Platform (HDP)	Only versions 7.1.x, 2.7.x, 2.6.x		Affected	link			cisagov	2022-01-12
Cloudera	Hortonworks DataPlane Platform			Unknown	link			cisagov	2022-01-12
Cloudera	Management Console	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Management Console for CDP Public Cloud			Unknown	link			cisagov	2022-01-12
Cloudera	Replication Manager			Unknown	link			cisagov	2022-01-12
Cloudera	SmartSense			Unknown	link			cisagov	2022-01-12
Cloudera	Workload Manager			Unknown	link			cisagov	2022-01-12
Cloudera	Workload XM	All versions		Affected	link			cisagov	2022-01-12
Cloudera	Workload XM (SaaS)			Unknown	link			cisagov	2022-01-12
CloudFlare				Unknown	link			cisagov	2022-01-12
Cloudian HyperStore				Unknown	link			cisagov	2022-01-12
Cloudogu	Ecosystem	All		Affected	link			cisagov	2022-01-12
Cloudogu	SCM-Manager			Unknown	link			cisagov	2022-01-12
Cloudron				Unknown	link			cisagov	2022-01-12
Clover				Unknown	link			cisagov	2022-01-12
Code42	Code42 App		8.8.1	Fixed	link			cisagov	2021-12-22
Code42	Crashplan		All	Fixed	link	The CrashPlan app is EOL and is now called Code42. If you detect CrashPlan installed, it is vulnerable. You can update easily to Code42 8.8.1 or newer.	https://www.crashplan.com/en-us/business/resources/crashplan-for-small-business-updates-its-desktop-app/	cisagov	2021-12-16
CodeBeamer				Unknown	link			cisagov	2022-01-12
Codesys				Unknown	link			cisagov	2022-01-12
Cohesity				Unknown	link			cisagov	2022-01-12
CommVault				Unknown	link			cisagov	2022-01-12
Concourse	Concourse			Unknown	link			cisagov	2022-01-12
ConcreteCMS.com				Unknown	link			cisagov	2022-01-12
Confluent	Confluent Cloud		N/A	Fixed	link			cisagov	2021-12-17
Confluent	Confluent ElasticSearch Sink Connector	<11.1.7		Affected	link			cisagov	2021-12-17
Confluent	Confluent for Kubernetes			Not Affected	link			cisagov	2021-12-17
Confluent	Confluent Google DataProc Sink Connector	<1.1.5		Affected	link			cisagov	2021-12-17
Confluent	Confluent HDFS 2 Sink Connector	<10.1.3		Affected	link			cisagov	2021-12-17
Confluent	Confluent HDFS 3 Sink Connector	<1.1.8		Affected	link			cisagov	2021-12-17
Confluent	Confluent Kafka Connectors			Not Affected	link			cisagov	2021-12-17
Confluent	Confluent Platform	<7.0.1		Affected	link			cisagov	2021-12-17
Confluent	Confluent Splunk Sink Connector	<2.05		Affected	link			cisagov	2021-12-17
Confluent	Confluent VMWare Tanzu GemFire Sink Connector	<1.0.8		Affected	link			cisagov	2021-12-17
Connect2id				Unknown	link			cisagov	2022-01-12
ConnectWise				Unknown	link			cisagov	2022-01-12
ContrastSecurity				Unknown	link			cisagov	2022-01-12
ControlUp				Unknown	link			cisagov	2022-01-12
COPADATA	All			Unknown	link			cisagov	2022-01-06
CouchBase				Unknown	link			cisagov	2022-01-12
CPanel				Unknown	link			cisagov	2022-01-12
Cradlepoint				Unknown	link			cisagov	2022-01-12
Crestron				Unknown	link			cisagov	2021-12-20
CrushFTP				Unknown	link			cisagov	2022-01-12
CryptShare				Unknown	link			cisagov	2022-01-12
CyberArk	Privileged Threat Analytics (PTA)		N/A	Fixed	link		This advisory is available to customers only and has not been reviewed by CISA.	cisagov	2021-12-14
Cybereason				Unknown	link			cisagov	2022-01-12
CyberRes				Unknown	link			cisagov	2022-01-12
Daktronics	All Sport Pro			Unknown	link			cisagov	2022-01-06
Daktronics	Dakronics Media Player			Not Affected	link			cisagov	2022-01-06
Daktronics	Dakronics Web Player	DWP-1000		Affected	link	DWP-1000 is not present in our codebase, but awaiting confirmation from LG re webOS platform.		cisagov	2022-01-06
Daktronics	Data Vision Software (DVS)			Unknown	link	DVS has one microservice that uses Log4j, but it uses a version that is not impacted.		cisagov	2022-01-06
Daktronics	Dynamic Messaging System (DMS)			Unknown	link			cisagov	2022-01-06
Daktronics	Dynamic Messaging System - DMS Core Player			Not Affected	link			cisagov	2022-01-06
Daktronics	Dynamic Messaging System - DMS Player hardware			Not Affected	link			cisagov	2022-01-06
Daktronics	Dynamic Messaging System - DMS Web Player			Unknown	link	DMS Web Player not present in our codebase, but awaiting confirmation from LG re webOS platform.		cisagov	2022-01-06
Daktronics	IBoot - Dataprobe IBoot Devices			Not Affected	link			cisagov	2022-01-06
Daktronics	Outdoor Smartlink Devices			Not Affected	link			cisagov	2022-01-06
Daktronics	Routers - Cisco Meraki Z3/Z3c Routers			Not Affected	link			cisagov	2022-01-06
Daktronics	Routers - Cisco Z1 Routers			Not Affected	link			cisagov	2022-01-06
Daktronics	Routers - Sierra Wireless RV50x/RV50	A-3350704		Affected	link			cisagov	2022-01-06
Daktronics	Show Control System (SCS)			Unknown	link			cisagov	2022-01-06
Daktronics	Vanguard			Unknown	link			cisagov	2022-01-06
Daktronics	Venus 1500			Unknown	link			cisagov	2022-01-06
Daktronics	Venus Control Suite (VCS)			Unknown	link			cisagov	2022-01-06
Daktronics	Video Image Processors			Not Affected	link			cisagov	2022-01-06
Daktronics	Webcam - Mobotix			Not Affected	link			cisagov	2022-01-06
DarkTrace	All			Unknown	link	This advisory is available to customer only and has not been reviewed by CISA.		cisagov	2022-01-12
Dassault Systèmes	All			Unknown	link	This advisory is available to customer only and has not been reviewed by CISA.		cisagov	2022-01-12
Databricks	All			Unknown	link			cisagov	2022-01-12
Datadog	Datadog Agent		>=6.17.0, <=6.32.2, >=7.17.0, <=7.32.2	Fixed	link	JMX monitoring component leverages an impacted version of log4j.		cisagov	2022-01-12
Datadog	datadog-kafka-connect-logs		< 1.0.2	Fixed	link	Version 1.0.2 of the library uses version 2.16.0 of Log4j.		cisagov	2022-01-12
Datadog	datadog-lambda-java		< 1.0.2	Fixed	link	Following AWS recommendation, library updated using the latest version of amazon-lambda-java-log4j2 (1.4.0).		cisagov	2022-01-12
Dataminer	All			Unknown	link			cisagov	2022-01-12
Datev				Unknown	link			cisagov	2022-01-12
Datto	All			Unknown	link			cisagov	2022-01-12
DBeaver	All			Not Affected	link			cisagov	2021-12-15
dCache.org	All			Unknown	link			cisagov	2022-01-12
Debian	Apache-log4j.1.2			Not Affected	link			cisagov	2022-01-12
Debian	Apache-log4j2			Unknown	link			cisagov	2022-01-12
Decos	Cloud			Not Affected	link			cisagov	2022-02-01
Decos	EvenementenAssistent + InkomensAssistent + Leerlingenvervoer + AIM online			Not Affected	link			cisagov	2022-02-01
Decos	Fixi			Not Affected	link			cisagov	2022-02-01
Decos	Integrations (StUF/ZGW/Doclogic-DataIntegrator)			Not Affected	link			cisagov	2022-02-01
Decos	JOIN Klant Contact			Not Affected	link			cisagov	2022-02-01
Decos	JOIN Zaak &I Document (on-premise)		All	Fixed	link	The solution contains Elasticsearch (vulnerable). Mitigating actions available on our WIKI.		cisagov	2022-02-01
Decos	JOIN Zaak &I Document (on-premise)		All	Fixed	link	The SaaS hosted solution contains Logstash + Elasticsearch (vulnerable). Mitigating actions taken.		cisagov	2022-02-01
Deepinstinct	All			Unknown	link			cisagov	2022-01-12
Dell	Alienware Command Center			Not Affected	link			cisagov	2021-12-15
Dell	Alienware OC Controls			Not Affected	link			cisagov	2021-12-15
Dell	Alienware On Screen Display			Not Affected	link			cisagov	2021-12-15
Dell	Alienware Update			Not Affected	link			cisagov	2021-12-15
Dell	APEX Console			Fixed	link	Cloud environment patched.		cisagov	2021-12-15
Dell	APEX Data Storage Services			Affected	link	Cloud environment patch in progress.		cisagov	2021-12-15
Dell	Atmos			Not Affected	link			cisagov	2021-12-15
Dell	Avamar vproxy			Not Affected	link			cisagov	2021-12-15
Dell	CalMAN Powered Calibration Firmware			Not Affected	link			cisagov	2021-12-15
Dell	CalMAN Ready for Dell			Not Affected	link			cisagov	2021-12-15
Dell	Centera			Not Affected	link			cisagov	2021-12-15
Dell	Chameleon Linux Based Diagnostics			Not Affected	link			cisagov	2021-12-15
Dell	Chassis Management Controller (CMC)			Not Affected	link			cisagov	2021-12-15
Dell	China HDD Deluxe			Not Affected	link			cisagov	2021-12-15
Dell	Client Platforms (Latitude, OptiPlex, Alienware, Inspiron, Precision, XPS, Vostro, ChengMing) BIOS			Not Affected	link			cisagov	2021-12-15
Dell	Cloud IQ			Fixed	link	Cloud environment patched.		cisagov	2021-12-15
Dell	Cloud Mobility for Dell EMC Storage			Not Affected	link			cisagov	2021-12-15
Dell	Cloud Tiering Appliance			Not Affected	link			cisagov	2021-12-15
Dell	CloudIQ Collector			Not Affected	link			cisagov	2021-12-15
Dell	Common Event Enabler			Not Affected	link			cisagov	2021-12-15
Dell	Connectrix (Cisco MDS 9000 switches)			Not Affected	link			cisagov	2021-12-15
Dell	Connectrix (Cisco MDS DCNM)	V, e, r, s, i, o, n, s, , p, r, i, o, r, , t, o, , 1, 1, ., 5, (, 1, x, )		Affected	link	Patch expected by 12/23/21.	DSA-2021-302	cisagov	2021-12-15
Dell	Connectrix B-Series SANnav	2.1.1		Affected	link	Patch expected by 2/28/2022.	DSA-2021-266	cisagov	2021-12-15
Dell	Connextrix B Series			Not Affected	link			cisagov	2021-12-15
Dell	CyberSecIQ Application			Not Affected	link			cisagov	2021-12-15
Dell	CyberSense for PowerProtect Cyber Recovery			Not Affected	link			cisagov	2021-12-15
Dell	Data Domain OS	Versions from 7.3.0.5 to 7.7.0.6		Affected	link	See DSA-2021-274	DSA-2021-274	cisagov	2021-12-15
Dell	Dell BSAFE Crypto-C Micro Edition			Not Affected	link			cisagov	2021-12-15
Dell	Dell BSAFE Crypto-J			Not Affected	link			cisagov	2021-12-15
Dell	Dell BSAFE Micro Edition Suite			Not Affected	link			cisagov	2021-12-15
Dell	Dell Calibration Assistant			Not Affected	link			cisagov	2021-12-15
Dell	Dell Cinema Color			Not Affected	link			cisagov	2021-12-15
Dell	Dell Cloud Command Repository Manager			Not Affected	link			cisagov	2021-12-15
Dell	Dell Cloud Management Agent			Not Affected	link			cisagov	2021-12-15
Dell	Dell Color Management			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command Configure			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command Integration Suite for System Center			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command Intel vPro Out of Band			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command Monitor			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command Power Manager			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command PowerShell Provider			Not Affected	link			cisagov	2021-12-15
Dell	Dell Command Update			Not Affected	link			cisagov	2021-12-15
Dell	Dell Customer Connect			Not Affected	link			cisagov	2021-12-15
Dell	Dell Data Guardian*			Not Affected	link			cisagov	2021-12-15
Dell	Dell Data Protection*			Not Affected	link			cisagov	2021-12-15
Dell	Dell Data Recovery Environment			Not Affected	link			cisagov	2021-12-15
Dell	Dell Data Vault			Not Affected	link			cisagov	2021-12-15
Dell	Dell Data Vault for Chrome OS			Not Affected	link			cisagov	2021-12-15
Dell	Dell Deployment Agent			Not Affected	link			cisagov	2021-12-15
Dell	Dell Digital Delivery			Not Affected	link			cisagov	2021-12-15
Dell	Dell Direct USB Key			Not Affected	link			cisagov	2021-12-15
Dell	Dell Display Manager 1.5 for Windows / macOS			Not Affected	link			cisagov	2021-12-15
Dell	Dell Display Manager 2.0 for Windows / macOS			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC AppSync			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Avamar	18.2, 19.1, 19.2, 19.3, 19.4		Affected	link	Patch expected by 12/20/21.	DSA-2021-277	cisagov	2021-12-15
Dell	Dell EMC BSN Controller Node			Fixed	link	See DSA-2021-305	DSA-2021-305	cisagov	2021-12-15
Dell	Dell EMC Cloud Disaster Recovery	Versions from 19.6 and later		Affected	link	Patch pending	DSA-2021-289	cisagov	2021-12-15
Dell	Dell EMC Cloudboost			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC CloudLink			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Container Storage Modules			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Data Computing Appliance (DCA)			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Data Protection Advisor		18.x (or earlier) -standalone DPA is EOSL, 18.2.x (IDPA), 19.1.x, 19.2.x, 19.3.x, 19.4.x, 19.5.x, 19.6.0	Fixed	link		DSA-2021-309	cisagov	2021-12-15
Dell	Dell EMC Data Protection Central		18.2.x-19.4.x, 19.5.0-19.5.0.7	Fixed	link	See DSA-2021-269	DSA-2021-269	cisagov	2021-12-15
Dell	Dell EMC Data Protection Search	Versions before 19.6		Affected	link	See DSA-2021-279	DSA-2021-279	cisagov	2021-12-15
Dell	Dell EMC DataIQ			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Disk Library for Mainframe			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Enterprise Storage Analytics for vRealize Operations	<6.0.0, 6.1.0, 6.2.x		Affected	link	See DSA-2021-278	DSA-2021-278	cisagov	2021-12-15
Dell	Dell EMC GeoDrive			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Integrated System for Azure Stack HCI			Affected	link	Dell EMC Integrated System for Azure Stack HCI is not impacted by this advisory. If Dell EMC SupportAssist Enterprise (SAE) or Dell EMC Secure Connect Gateway (SCG) were optionally installed with Dell EMC Integrated System for Azure Stack HCI monitor the following advisories. See DSA-2021-307.	DSA-2021-307	cisagov	2021-12-15
Dell	Dell EMC Integrated System for Microsoft Azure Stack Hub			Affected	link	Patch expected by 2022-01-31.		cisagov	2021-12-15
Dell	Dell EMC Isilon InsightIQ			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC License Manager			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Metro Node	Versions before 7.0.1 P2		Affected	link	See DSA-2021-308	DSA-2021-308	cisagov	2021-12-15
Dell	Dell EMC NetWorker	19.4.x, 19.5.x		Affected	link	Patch expected by 12/20/21	DSA-2021-280	cisagov	2021-12-15
Dell	Dell EMC NetWorker VE	19.4.x, 19.5.x		Affected	link	Patch expected by 12/20/21	DSA-2021-280	cisagov	2021-12-15
Dell	Dell EMC Networking Onie			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Networking Virtual Edge Platform with VersaOS			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC OpenManage Ansible Modules			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC OpenManage Enterprise Services	Version 1.2 and earlier		Affected	link	Patch expected by 12/20/21	DSA-2021-276	cisagov	2021-12-15
Dell	Dell EMC OpenManage integration for Splunk			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC OpenManage Integration for VMware vCenter			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC OpenManage Management pack for vRealize Operations			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC OpenManage Operations Connector for Micro Focus Operations Bridge Manager			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerFlex Appliance			Affected	link	See DSA-2021-293.	DSA-2021-293	cisagov	2021-12-15
Dell	Dell EMC PowerFlex Rack	RCM 3.3 train - all versions up to 3.3.11.0, RCM 3.4 train - all versions up to 3.4.6.0, RCM 3.5 train - all versions up to 3.5.6.0, RCM 3.6 train - all versions up to 3.6.2.0		Affected	link	See DSA-2021-292.	DSA-2021-292	cisagov	2021-12-15
Dell	Dell EMC PowerFlex Software (SDS)	3.5, 3.5.1, 3.5.1.1, 3.5.1.2, 3.5.1.3, 3.5.1.4, 3.6, 3.6.0.1, 3.6.0.2		Affected	link	See DSA-2021-272.	DSA-2021-272	cisagov	2021-12-15
Dell	Dell EMC PowerPath			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerPath Management Appliance			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerProtect Cyber Recovery			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerProtect Data Manager	All versions 19.9 and earlier		Affected	link	See DSA-2021-286.	DSA-2021-286	cisagov	2021-12-15
Dell	Dell EMC PowerProtect DP Series Appliance (iDPA)	2.7.0 and earlier		Affected	link	See DSA 2021-285.	DSA-2021-285	cisagov	2021-12-15
Dell	Dell EMC PowerScale OneFS			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerShell for PowerMax			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerShell for Powerstore			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerShell for Unity			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerStore	Versions before 2.0.1.3-1538564		Affected	link	See DSA-2021-295.	DSA-2021-295	cisagov	2021-12-15
Dell	Dell EMC PowerSwitch Z9264F-ON BMC			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerSwitch Z9432F-ON BMC			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC PowerVault ME4 Series Storage Arrays			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC RecoverPoint	All		Affected	link	See DSA 2021-284.	DSA 2021-284	cisagov	2021-12-15
Dell	Dell EMC Repository Manager (DRM)			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Ruckus SmartZone 100 Controller			Fixed	link	See DSA-2021-303	DSA-2021-303	cisagov	2021-12-15
Dell	Dell EMC Ruckus SmartZone 300 Controller			Fixed	link	See DSA-2021-303	DSA-2021-303	cisagov	2021-12-15
Dell	Dell EMC Ruckus Virtual Software			Fixed	link	See DSA-2021-303	DSA-2021-303	cisagov	2021-12-15
Dell	Dell EMC SourceOne			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC SRM		Versions before 4.6.0.2	Fixed	link	See DSA-2021-301.	DSA-2021-301	cisagov	2021-12-15
Dell	Dell EMC Streaming Data Platform	1.1, 1.2, 1.2 HF1, 1.3, 1.3.1		Affected	link	See DSA-2021-297.	DSA-2021-297	cisagov	2021-12-15
Dell	Dell EMC Systems Update (DSU)			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Unisphere 360			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC Unity			Fixed	link	See DSA-2021-294.	DSA-2021-294	cisagov	2021-12-15
Dell	Dell EMC Virtual Storage Integrator			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC VPLEX			Not Affected	link			cisagov	2021-12-15
Dell	Dell EMC vProtect	19.5-19.9		Affected	link	See DSA-2022-007.	DSA-2022-007	cisagov	2021-12-15
Dell	Dell EMC VxRail	4.5.x, 4.7.x, 7.0.x		Affected	link	See DSA-2021-265.	DSA-2021-265	cisagov	2021-12-15
Dell	Dell EMC XC			Affected	link	See DSA-2021-311.	DSA-2021-311	cisagov	2021-12-15
Dell	Dell EMC XtremIO			Not Affected	link			cisagov	2021-12-15
Dell	Dell Encryption Enterprise*			Not Affected	link			cisagov	2021-12-15
Dell	Dell Encryption Personal*			Not Affected	link			cisagov	2021-12-15
Dell	Dell Endpoint Security Suite Enterprise*			Not Affected	link			cisagov	2021-12-15
Dell	Dell Hybrid Client			Not Affected	link			cisagov	2021-12-15
Dell	Dell ImageAssist			Not Affected	link			cisagov	2021-12-15
Dell	Dell Insights Client			Not Affected	link			cisagov	2021-12-15
Dell	Dell Linux Assistant			Not Affected	link			cisagov	2021-12-15
Dell	Dell Memory Solutions			Not Affected	link			cisagov	2021-12-15
Dell	Dell Mobile Connect			Not Affected	link			cisagov	2021-12-15
Dell	Dell Monitor ISP (Windows/Mac/Linux)			Not Affected	link			cisagov	2021-12-15
Dell	Dell Monitor SDK			Not Affected	link			cisagov	2021-12-15
Dell	Dell Networking X-Series			Not Affected	link			cisagov	2021-12-15
Dell	Dell OpenManage Change Management			Not Affected	link			cisagov	2021-12-15
Dell	Dell OpenManage Enterprise	Versions before 3.8.2		Affected	link	See DSA-2021-275	DSA-2021-275	cisagov	2021-12-15
Dell	Dell OpenManage Enterprise CloudIQ plugin			Not Affected	link			cisagov	2021-12-15
Dell	Dell OpenManage Enterprise Modular	Versions before 1.40.10		Affected	link	See DSA-2021-268	DSA-2021-268	cisagov	2021-12-15
Dell	Dell OpenManage Enterprise Power Manager plugin			Not Affected	link			cisagov	2021-12-15
Dell	Dell OpenManage Mobile			Not Affected	link			cisagov	2021-12-15
Dell	Dell OpenManage Server Administrator			Not Affected	link			cisagov	2021-12-15
Dell	Dell Optimizer			Not Affected	link			cisagov	2021-12-15
Dell	Dell OS Recovery Tool			Not Affected	link			cisagov	2021-12-15
Dell	Dell Peripheral Manager 1.4 / 1.5 for Windows			Not Affected	link			cisagov	2021-12-15
Dell	Dell Platform Service			Not Affected	link			cisagov	2021-12-15
Dell	Dell Power Manager			Not Affected	link			cisagov	2021-12-15
Dell	Dell Power Manager Lite			Not Affected	link			cisagov	2021-12-15
Dell	Dell Precision Optimizer			Not Affected	link			cisagov	2021-12-15
Dell	Dell Precision Optimizer for Linux			Not Affected	link			cisagov	2021-12-15
Dell	Dell Premier Color			Not Affected	link			cisagov	2021-12-15
Dell	Dell Recovery (Linux)			Not Affected	link			cisagov	2021-12-15
Dell	Dell Remediation Platform			Not Affected	link			cisagov	2021-12-15
Dell	Dell Remote Execution Engine (DRONE)			Not Affected	link			cisagov	2021-12-15
Dell	Dell Security Advisory Update - DSA-2021-088			Not Affected	link			cisagov	2021-12-15
Dell	Dell Security Management Server & Dell Security Management Server Virtual*			Not Affected	link			cisagov	2021-12-15
Dell	Dell SupportAssist SOS			Not Affected	link			cisagov	2021-12-15
Dell	Dell Thin OS			Not Affected	link			cisagov	2021-12-15
Dell	Dell Threat Defense			Not Affected	link			cisagov	2021-12-15
Dell	Dell True Color			Not Affected	link			cisagov	2021-12-15
Dell	Dell Trusted Device			Not Affected	link			cisagov	2021-12-15
Dell	Dell Update			Not Affected	link			cisagov	2021-12-15
Dell	Dream Catcher			Not Affected	link			cisagov	2021-12-15
Dell	DUP Creation Service			Not Affected	link			cisagov	2021-12-15
Dell	DUP Framework (ISG)			Not Affected	link			cisagov	2021-12-15
Dell	ECS		3.3.x, 3.4.x, 3.5.x, 3.6.0.x, 3.6.1.x, 3.6.2.0	Fixed	link	See DSA-2021-273.	DSA-2021-273	cisagov	2021-12-15
Dell	Embedded NAS			Not Affected	link			cisagov	2021-12-15
Dell	Embedded Service Enabler			Not Affected	link			cisagov	2021-12-15
Dell	Enterprise Hybrid Cloud			Not Affected	link	See DSA-2021-270.	DSA-2021-270	cisagov	2021-12-15
Dell	Equallogic PS			Not Affected	link			cisagov	2021-12-15
Dell	Fluid FS			Not Affected	link			cisagov	2021-12-15
Dell	iDRAC Service Module (iSM)			Not Affected	link			cisagov	2021-12-15
Dell	Infinity MLK (firmware)			Not Affected	link			cisagov	2021-12-15
Dell	Integrated Dell Remote Access Controller (iDRAC)			Not Affected	link			cisagov	2021-12-15
Dell	ISG Accelerators			Not Affected	link			cisagov	2021-12-15
Dell	ISG Board & Electrical			Not Affected	link			cisagov	2021-12-15
Dell	ISG Drive & Storage Media			Not Affected	link			cisagov	2021-12-15
Dell	IsilonSD Management Server			Not Affected	link			cisagov	2021-12-15
Dell	IVE-WinDiag			Not Affected	link			cisagov	2021-12-15
Dell	Mainframe Enablers			Not Affected	link			cisagov	2021-12-15
Dell	MDS			Not Affected	link			cisagov	2021-12-15
Dell	My Dell			Not Affected	link			cisagov	2021-12-15
Dell	MyDell Mobile			Not Affected	link			cisagov	2021-12-15
Dell	NetWorker Management Console			Not Affected	link			cisagov	2021-12-15
Dell	Networking BIOS			Not Affected	link			cisagov	2021-12-15
Dell	Networking DIAG			Not Affected	link			cisagov	2021-12-15
Dell	Networking N-Series			Not Affected	link			cisagov	2021-12-15
Dell	Networking OS 10			Not Affected	link			cisagov	2021-12-15
Dell	Networking OS 9			Not Affected	link			cisagov	2021-12-15
Dell	Networking SD-WAN Edge SD-WAN			Not Affected	link			cisagov	2021-12-15
Dell	Networking W-Series			Not Affected	link			cisagov	2021-12-15
Dell	Networking X-Series			Not Affected	link			cisagov	2021-12-15
Dell	OMIMSSC (OpenManage Integration for Microsoft System Center)			Not Affected	link			cisagov	2021-12-15
Dell	OMNIA			Not Affected	link			cisagov	2021-12-15
Dell	OpenManage Connections - Nagios			Not Affected	link			cisagov	2021-12-15
Dell	OpenManage Connections - ServiceNow			Not Affected	link			cisagov	2021-12-15
Dell	OpenManage Integration for Microsoft System Center for System Center Operations Manager			Not Affected	link			cisagov	2021-12-15
Dell	OpenManage Integration with Microsoft Windows Admin Center			Not Affected	link			cisagov	2021-12-15
Dell	OpenManage Network Integration			Not Affected	link			cisagov	2021-12-15
Dell	OpenManage Power Center			Not Affected	link			cisagov	2021-12-15
Dell	PowerConnect N3200			Not Affected	link			cisagov	2021-12-15
Dell	PowerConnect PC2800			Not Affected	link			cisagov	2021-12-15
Dell	PowerConnect PC8100			Not Affected	link			cisagov	2021-12-15
Dell	PowerEdge Accelerator Solutions			Not Affected	link			cisagov	2021-12-15
Dell	PowerEdge BIOS			Not Affected	link			cisagov	2021-12-15
Dell	PowerEdge Networking Solutions			Not Affected	link			cisagov	2021-12-15
Dell	PowerEdge Operating Systems			Not Affected	link			cisagov	2021-12-15
Dell	PowerEdge RAID Controller Solutions			Not Affected	link			cisagov	2021-12-15
Dell	PowerTools Agent			Not Affected	link			cisagov	2021-12-15
Dell	PPDM Kubernetes cProxy			Not Affected	link			cisagov	2021-12-15
Dell	PPDM VMware vProxy			Not Affected	link			cisagov	2021-12-15
Dell	Redtail			Not Affected	link			cisagov	2021-12-15
Dell	Remotely Anywhere			Not Affected	link			cisagov	2021-12-15
Dell	Riptide (firmware)			Not Affected	link			cisagov	2021-12-15
Dell	Rugged Control Center (RCC)			Not Affected	link			cisagov	2021-12-15
Dell	SD ROM Utility			Not Affected	link			cisagov	2021-12-15
Dell	SDNAS			Not Affected	link			cisagov	2021-12-15
Dell	Secure Connect Gateway (SCG) Appliance	"5.00.00 5.00.05 and 4.0.06 and earlier versions (OVF and VHD)"		Affected	link	See DSA-2021-282	[]	cisagov	2021-12-15
Dell	Secure Connect Gateway (SCG) Appliance		5.00.00, 5.00.05, and 4.0.06 and earlier versions (OVF and VHD)	Fixed	link	See DSA-2021-282	DSA-2021-282	cisagov	2021-12-15
Dell	Secure Connect Gateway (SCG) Policy Manager		5.00.00.10, 5.00.05.10	Fixed	link	See DSA-2021-281	DSA-2021-281	cisagov	2021-12-15
Dell	Server Storage			Not Affected	link			cisagov	2021-12-15
Dell	Smart Fabric Storage Software			Not Affected	link			cisagov	2021-12-15
Dell	SmartByte			Not Affected	link			cisagov	2021-12-15
Dell	SMI-S			Not Affected	link			cisagov	2021-12-15
Dell	Software RAID			Not Affected	link			cisagov	2021-12-15
Dell	Solutions Enabler			Not Affected	link			cisagov	2021-12-15
Dell	Solutions Enabler vApp			Not Affected	link			cisagov	2021-12-15
Dell	Sonic			Not Affected	link			cisagov	2021-12-15
Dell	SRS Policy Manager		7.0	Fixed	link	See DSA-2021-287.	DSA-2021-287	cisagov	2021-12-15
Dell	SRS VE			Not Affected	link			cisagov	2021-12-15
Dell	Storage Center - Dell Storage Manager	16.x, 17.x, 18.x, 19.x, 20.1.1		Affected	link	See DSA-2021-310.	DSA-2021-310	cisagov	2021-12-15
Dell	Storage Center OS and additional SC applications unless otherwise noted			Not Affected	link			cisagov	2021-12-15
Dell	SupportAssist Client Commercial			Not Affected	link			cisagov	2021-12-15
Dell	SupportAssist Client Consumer			Not Affected	link			cisagov	2021-12-15
Dell	SupportAssist Enterprise	2.0.70 and earlier		Affected	link	See DSA-2021-283.	DSA-2021-283	cisagov	2021-12-15
Dell	UCC Edge			Not Affected	link			cisagov	2021-12-15
Dell	Unisphere Central		Versions before 4.0 SP 9.2 (4.0.9.1541235)	Fixed	link	See DSA-2021-296.	DSA-2021-296	cisagov	2021-12-15
Dell	Unisphere for PowerMax			Not Affected	link			cisagov	2021-12-15
Dell	Unisphere for PowerMax vApp			Not Affected	link			cisagov	2021-12-15
Dell	Unisphere for VMAX			Not Affected	link			cisagov	2021-12-15
Dell	Unisphere for VNX			Not Affected	link			cisagov	2021-12-15
Dell	Update Manager Plugin			Not Affected	link			cisagov	2021-12-15
Dell	Vblock			Affected	link	Patch pending See vce6771 (requires customer login). This advisory is available to customer only and has not been reviewed by CISA.	vce6771	cisagov	2021-12-15
Dell	ViPR Controller			Not Affected	link			cisagov	2021-12-15
Dell	VMware vRealize Automation 8.x	8.2 8.3 8.4 8.5 and 8.6		Affected	link	Patch expected by 12/19/21		cisagov	2021-12-15
Dell	VMware vRealize Orchestrator 8.x	8.2 8.3 8.4 8.5 and 8.6		Affected	link	Patch expected by 12/19/21		cisagov	2021-12-15
Dell	VNX Control Station			Not Affected	link			cisagov	2021-12-15
Dell	VNX1			Not Affected	link			cisagov	2021-12-15
Dell	VNX2			Not Affected	link			cisagov	2021-12-15
Dell	VNXe 1600		Versions 3.1.16.10220572 and earlier	Fixed	link	See DSA-2021-299	DSA-2021-299	cisagov	2021-12-15
Dell	VNXe 3200		Version 3.1.15.10216415 and earlier	Fixed	link	See DSA-2021-298	DSA-2021-298	cisagov	2021-12-15
Dell	VPLEX VS2/VS6 / VPLEX Witness			Not Affected	link			cisagov	2021-12-15
Dell	vRealize Data Protection Extension Data Management			Fixed	link	See DSA-2021-290.	DSA-2021-290	cisagov	2021-12-15
Dell	vRealize Orchestrator (vRO) Plug-ins for Dell EMC Storage			Fixed	link	See DSA-2021-300.	DSA-2021-300	cisagov	2021-12-15
Dell	vRO Plugin for Dell EMC PowerMax		Version 1.2.3 or earlier	Fixed	link	See DSA-2021-300		cisagov	2021-12-15
Dell	vRO Plugin for Dell EMC PowerScale		Version 1.1.0 or earlier	Fixed	link	See DSA-2021-300		cisagov	2021-12-15
Dell	vRO Plugin for Dell EMC PowerStore	Version 1.1.4 or earlier		Affected	link	See DSA-2021-300		cisagov	2021-12-15
Dell	vRO Plugin for Dell EMC Unity	Version 1.0.6 or earlier		Affected	link	See DSA-2021-300		cisagov	2021-12-15
Dell	vRO Plugin for Dell EMC XtremIO	Version 4.1.2 or earlier		Affected	link	See DSA-2021-300		cisagov	2021-12-15
Dell	Vsan Ready Nodes			Not Affected	link			cisagov	2021-12-15
Dell	VxBlock			Not Affected	link	Patch pending See vce6771 (requires customer login). This advisory is available to customer only and has not been reviewed by CISA.	vce6771	cisagov	2021-12-15
Dell	Warnado MLK (firmware)			Not Affected	link			cisagov	2021-12-15
Dell	Wyse Management Suite		< 3.5	Fixed	link	See DSA-2021-267	DSA-2021-267	cisagov	2021-12-15
Dell	Wyse Proprietary OS (ThinOS)			Not Affected	link			cisagov	2021-12-15
Dell	Wyse Windows Embedded Suite			Not Affected	link			cisagov	2021-12-15
Deltares	Delft-FEWS		>2018.02	Fixed	link	Mitigations Only		cisagov	2021-12-22
Denequa	All			Unknown	link			cisagov	2022-01-12
Device42	All			Not Affected	link			cisagov	2022-01-12
Devolutions	All			Not Affected	link			cisagov	2022-01-12
Diebold Nixdorf	All			Unknown	link			cisagov	2022-01-12
Digi International	AnywhereUSB Manager			Not Affected	link			cisagov	2021-12-21
Digi International	ARMT			Not Affected	link			cisagov	2021-12-21
Digi International	Aview			Not Affected	link			cisagov	2021-12-21
Digi International	AVWOB			Not Affected	link			cisagov	2021-12-21
Digi International	CTEK G6200 family			Not Affected	link			cisagov	2021-12-21
Digi International	CTEK SkyCloud			Not Affected	link			cisagov	2021-12-21
Digi International	CTEK Z45 family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi 54xx family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi 63xx family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi AnywhereUSB (G2) family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi AnywhereUSB Plus family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Connect EZ family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Connect family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Connect IT family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Connect Sensor family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Connect WS family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi ConnectPort family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi ConnectPort LTS family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Embedded Android			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Embedded Yocto			Not Affected	link			cisagov	2021-12-21
Digi International	Digi EX routers			Not Affected	link			cisagov	2021-12-21
Digi International	Digi IX routers			Not Affected	link			cisagov	2021-12-21
Digi International	Digi LR54			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Navigator			Not Affected	link			cisagov	2021-12-21
Digi International	Digi One family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Passport family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi PortServer TS family			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Remote Manager			Not Affected	link			cisagov	2021-12-21
Digi International	Digi TX routers			Not Affected	link			cisagov	2021-12-21
Digi International	Digi WR11			Not Affected	link			cisagov	2021-12-21
Digi International	Digi WR21			Not Affected	link			cisagov	2021-12-21
Digi International	Digi WR31			Not Affected	link			cisagov	2021-12-21
Digi International	Digi WR44R/RR			Not Affected	link			cisagov	2021-12-21
Digi International	Digi WR54			Not Affected	link			cisagov	2021-12-21
Digi International	Digi WR64			Not Affected	link			cisagov	2021-12-21
Digi International	Digi Xbee mobile app			Not Affected	link			cisagov	2021-12-21
Digi International	Lighthouse			Not Affected	link			cisagov	2021-12-21
Digi International	Realport			Not Affected	link			cisagov	2021-12-21
Digi International	Remote Hub Config Utility			Not Affected	link			cisagov	2021-12-21
Digicert	All			Unknown	link			cisagov	2022-01-12
Digital AI	All			Unknown	link			cisagov	2022-01-12
Digital Alert Systems	All			Unknown	link	Formerly Monroe Electronics, Inc.		cisagov	2022-01-05
DirectAdmin	All			Not Affected	link	Invidivual plugins not developed as part of DirectAdmin core may be vulnerable.		cisagov	2022-01-05
DNSFilter	All			Unknown	link			cisagov	2022-01-12
Docker	Infrastructure			Not Affected	link	Docker infrastructure not vulnerable, Docker images could be vulnerable. For more info see source.		cisagov	2022-01-12
Docusign	All			Unknown	link			cisagov	2022-01-12
DotCMS	Hybrid Content Management System			Fixed	link			cisagov	2022-01-12
DrayTek	All			Not Affected	link			cisagov	2021-12-15
Dropwizard	All			Not Affected	link	Only vulnerable if you manually added Log4j.		cisagov	2021-12-15
Dräger	All			Not Affected	link			cisagov	2021-12-15
DSpace	All			Unknown	link			cisagov	2022-01-12
Dynatrace	ActiveGate			Fixed	link			cisagov	2021-12-21
Dynatrace	Cloud Services			Fixed	link	Please see Dynatrace Communication for details		cisagov	2021-12-21
Dynatrace	Extensions			Fixed	link	Please see Dynatrace Communication for details		cisagov	2021-12-21
Dynatrace	FedRamp SAAS			Fixed	link			cisagov	2021-12-21
Dynatrace	Managed cluster nodes			Not Affected	link	Please see Dynatrace Communication for details		cisagov	2021-12-21
Dynatrace	OneAgent			Not Affected	link			cisagov	2021-12-21
Dynatrace	SAAS			Fixed	link			cisagov	2021-12-21
Dynatrace	Synthetic Private ActiveGate			Fixed	link	Please see Dynatrace Communication for details		cisagov	2021-12-21
Dynatrace	Synthetic public locations			Fixed	link			cisagov	2021-12-21
EasyRedmine				Unknown	link			cisagov	2022-01-12
Eaton	Undisclosed	Undisclosed		Affected	link	Doesn't openly disclose what products are affected or not for quote 'security purposes'. Needs email registration. No workaround provided due to registration wall.		cisagov	2022-01-12
EclecticIQ				Unknown	link			cisagov	2022-01-12
Eclipse Foundation				Unknown	link			cisagov	2022-01-12
Edwards				Unknown	link			cisagov	2022-01-06
EFI				Unknown	link			cisagov	2022-01-12
EGroupware				Unknown	link			cisagov	2022-01-12
Elastic	APM Java Agent			Unknown	link			cisagov	2021-12-15
Elastic	APM Server			Unknown	link			cisagov	2021-12-15
Elastic	Beats			Unknown	link			cisagov	2021-12-15
Elastic	Cmd			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Agent			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Cloud			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Cloud Enterprise			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Cloud Enterprise			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Cloud on Kubernetes			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Endgame			Unknown	link			cisagov	2021-12-15
Elastic	Elastic Maps Service			Unknown	link			cisagov	2021-12-15
Elastic	Elasticsearch	5, 6, 8		Affected	link			cisagov	2021-12-15
Elastic	Endpoint Security			Unknown	link			cisagov	2021-12-15
Elastic	Enterprise Search			Unknown	link			cisagov	2021-12-15
Elastic	Fleet Server			Unknown	link			cisagov	2021-12-15
Elastic	Kibana			Unknown	link			cisagov	2021-12-15
Elastic	Logstash	<6.8.21, <7.16.1		Affected	link			cisagov	2021-12-15
Elastic	Machine Learning			Unknown	link			cisagov	2021-12-15
Elastic	Swiftype			Unknown	link			cisagov	2021-12-15
ElasticSearch	all products			Unknown				cisagov	2022-01-12
Ellucian	Admin			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Analytics			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Document Management (includes Banner Document Retention)			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Event Publisher			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Integration for eLearning			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Integration for eProcurement			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Self Service			Unknown	link			cisagov	2021-12-17
Ellucian	Banner Workflow			Unknown	link			cisagov	2021-12-17
Ellucian	Colleague			Unknown	link	On-prem and cloud deployements expect fixed 12/18/2021		cisagov	2021-12-17
Ellucian	Colleague Analytics			Unknown	link			cisagov	2021-12-17
Ellucian	CRM Advance			Unknown	link			cisagov	2021-12-17
Ellucian	CRM Advise			Unknown	link			cisagov	2021-12-17
Ellucian	CRM Recruit			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Advance Web Connector			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Data Access			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Design Path			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Ellucian Portal			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian ePrint			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Ethos API & API Management Center			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Ethos Extend			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Ethos Integration			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian eTranscripts			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Experience			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Intelligent Platform (ILP)			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian International Student and Scholar Management (ISSM)			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Message Service (EMS)			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Messaging Adapter (EMA)			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Mobile			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Payment Gateway			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian PowerCampus			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Solution Manager			Unknown	link			cisagov	2021-12-17
Ellucian	Ellucian Workflow			Unknown	link			cisagov	2021-12-17
Ellucian	Enterprise Identity Services(BEIS)			Unknown	link			cisagov	2021-12-17
Emerson	148 Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	2051 Pressure Transmitter Family			Unknown	link			cisagov	2021-12-17
Emerson	2088 Pressure Transmitter Family			Unknown	link			cisagov	2021-12-17
Emerson	2090F/2090P Pressure Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	215 Pressure Sensor Module			Unknown	link			cisagov	2021-12-17
Emerson	248 Configuration Application			Unknown	link			cisagov	2021-12-17
Emerson	248 Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	3051 & 3051S Pressure transmitter families			Unknown	link			cisagov	2021-12-17
Emerson	3144P Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	326P Pressure Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	326T Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	327T Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	4088 Pressure Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	4088 Upgrade Utility			Unknown	link			cisagov	2021-12-17
Emerson	4600 Pressure Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	4732 Endeavor			Unknown	link			cisagov	2021-12-17
Emerson	4732 Endeavor			Unknown	link			cisagov	2021-12-17
Emerson	550 PT Pressure Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	5726 Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	5726 Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	644 Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	648 Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	848T Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	Combustion: OCX OXT 6888 CX1100 6888Xi			Unknown	link			cisagov	2021-12-17
Emerson	CT2211 QCL Aerosol Microleak Detection System			Unknown	link			cisagov	2021-12-17
Emerson	CT3000 QCL Automotive OEM Gas Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	CT4000 QCL Marine OEM Gas Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	CT4215 QCL Packaging Leak Detection System			Unknown	link			cisagov	2021-12-17
Emerson	CT4400 QCL General Purpose Continuous Gas Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	CT4404 QCL pMDI Leak Detection Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	CT5100 QCL Field Housing Continuous Gas Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	CT5400 QCL General Purpose Continuous Gas Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	CT5800 QCL Flameproof Housing Continuous Gas Analyzer			Unknown	link			cisagov	2021-12-17
Emerson	DHNC1 DHNC2			Unknown	link			cisagov	2021-12-17
Emerson	DHNC1 DHNC2			Unknown	link			cisagov	2021-12-17
Emerson	Emerson Aperio software			Unknown	link			cisagov	2021-12-17
Emerson	Engineering Assistant 5.x & 6.x			Unknown	link			cisagov	2021-12-17
Emerson	Fieldwatch and Service consoles			Unknown	link			cisagov	2021-12-17
Emerson	Fieldwatch and Service consoles			Unknown	link			cisagov	2021-12-17
Emerson	Flame Detection: 975UF & 975UR Infrared Flame Detectors 975HR Infrared Hydrogen Flame Detector 975MR Multi-Spectrum Infrared Flame Detector			Unknown	link			cisagov	2021-12-17
Emerson	Flarecheck FlowCheck Flowel & PWAM software			Unknown	link			cisagov	2021-12-17
Emerson	Flarecheck FlowCheck Flowel & PWAM software			Unknown	link			cisagov	2021-12-17
Emerson	Gas Analysis: X-STREAM Enhanced (XEGP XEGK XEGC XEGF XEFD XECLD)			Unknown	link			cisagov	2021-12-17
Emerson	Gas Analysis: X-STREAM Enhanced (XEGP XEGK XEGC XEGF XEFD XECLD)			Unknown	link			cisagov	2021-12-17
Emerson	Gas Chromatographs: M500/2350A MON2000 700XA/1500XA 370XA MON2020			Unknown	link			cisagov	2021-12-17
Emerson	Gas Chromatographs: M500/2350A MON2000 700XA/1500XA 370XA MON2020			Unknown	link			cisagov	2021-12-17
Emerson	Gas Detection: Millennium II Basic Single & Dual Channel 928 Wireless Gas Monitor/628 Gas Sensor 935 & 936 Open Path Gas Detector Millennium Air Particle Monitor			Unknown	link			cisagov	2021-12-17
Emerson	Gas Detection: Millennium II Basic Single & Dual Channel 928 Wireless Gas Monitor/628 Gas Sensor 935 & 936 Open Path Gas Detector Millennium Air Particle Monitor			Unknown	link			cisagov	2021-12-17
Emerson	Incus Ultrasonic gas leak detector			Unknown	link			cisagov	2021-12-17
Emerson	K-Series Coriolis Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	K-Series Coriolis Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	Liquid Transmitters: 5081 1066 1056 1057 56			Unknown	link			cisagov	2021-12-17
Emerson	Mark III Gas and Liquid USM			Unknown	link			cisagov	2021-12-17
Emerson	Mark III Gas and Liquid USM			Unknown	link			cisagov	2021-12-17
Emerson	MPFM2600 & MPFM5726			Unknown	link			cisagov	2021-12-17
Emerson	MPFM2600 & MPFM5726			Unknown	link			cisagov	2021-12-17
Emerson	Plantweb Advisor for Metrology and Metering Suite SDK			Unknown	link			cisagov	2021-12-17
Emerson	Plantweb Advisor for Metrology and Metering Suite SDK			Unknown	link			cisagov	2021-12-17
Emerson	Prolink Configuration Software			Unknown	link			cisagov	2021-12-17
Emerson	Prolink Configuration Software			Unknown	link			cisagov	2021-12-17
Emerson	Prolink Mobile Application & ProcessViz Software			Unknown	link			cisagov	2021-12-17
Emerson	Prolink Mobile Application & ProcessViz Software			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount 2230 Graphical Field Display			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount 2240S Multi-input Temperature Transmitter			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount 2410 Tank Hub			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount 2460 System Hub			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount 3490 Controller			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount CMS/IOU 61			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount CMS/SCU 51/SCC			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount CMS/WSU 51/SWF 51			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount IO-Link Assistant			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount Level Detectors (21xx)			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount Level Transmitters (14xx 33xx 53xx 54xx 56xx)			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount Radar Configuration Tool			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount Radar Level Gauges (Pro 39xx 59xx)			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount RadarMaster and RadarMaster Plus			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount Tank Radar Gauges (TGUxx)			Unknown	link			cisagov	2021-12-17
Emerson	Rosemount TankMaster and TankMaster Mobile			Unknown	link			cisagov	2021-12-17
Emerson	Spectrex family Flame Detectors and Rosemount 975 flame detector			Unknown	link			cisagov	2021-12-17
Emerson	USM 3410 and 3810 Series Ultrasonic Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	USM 3410 and 3810 Series Ultrasonic Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	Vortex and Magmeter Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	Vortex and Magmeter Transmitters			Unknown	link			cisagov	2021-12-17
Emerson	WCM SWGM			Unknown	link			cisagov	2021-12-17
Emerson	WCM SWGM			Unknown	link			cisagov	2021-12-17
EnterpriseDT				Unknown	link			cisagov	2022-01-12
ESET				Unknown	link			cisagov	2022-01-12
ESRI	ArcGIS Data Store		All	Fixed	link	Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions		cisagov	2021-12-17
ESRI	ArcGIS Enterprise		All	Fixed	link	Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions		cisagov	2021-12-17
ESRI	ArcGIS GeoEvent Server		All	Fixed	link	Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions		cisagov	2021-12-17
ESRI	ArcGIS Server		All	Fixed	link	Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions		cisagov	2021-12-17
ESRI	ArcGIS Workflow Manager Server		All	Fixed	link	Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions		cisagov	2021-12-17
ESRI	Portal for ArcGIS		All	Fixed	link	Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions		cisagov	2021-12-17
Estos				Unknown	link			cisagov	2022-01-12
Evolveum Midpoint				Unknown	link			cisagov	2022-01-12
Ewon	All			Not Affected	link			cisagov	2022-02-02
Exabeam				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Exact				Unknown	link			cisagov	2022-01-12
Exivity				Unknown	link			cisagov	2022-01-12
ExtraHop	Reveal(x)	<=8.4.6, <=8.5.3, <=8.6.4		Affected	link	Versions >8.4.7, >8.5.4, >8.6.5 and >=8.7 are fixed.		cisagov	2021-12-21
eXtreme Hosting				Unknown	link			cisagov	2022-01-12
Extreme Networks				Unknown	link			cisagov	2022-01-12
Extron				Unknown	link			cisagov	2022-01-12
F-Secure	Elements Connector			Unknown	link			cisagov	2022-01-12
F-Secure	Endpoint Proxy	13-15		Affected	link			cisagov	2022-01-12
F-Secure	Messaging Security Gateway			Unknown	link			cisagov	2022-01-12
F-Secure	Policy Manager	13-15		Affected	link			cisagov	2022-01-12
F-Secure	Policy Manager Proxy	13-15		Affected	link			cisagov	2022-01-12
F5	BIG-IP (all modules)			Not Affected	link			cisagov	2022-01-12
F5	BIG-IQ Centralized Management			Not Affected	link			cisagov	2022-01-12
F5	F5OS			Not Affected	link			cisagov	2022-01-12
F5	NGINX App Protect			Not Affected	link			cisagov	2022-01-12
F5	NGINX Controller			Not Affected	link			cisagov	2022-01-12
F5	NGINX Ingress Controller			Not Affected	link			cisagov	2022-01-12
F5	NGINX Instance Manager			Not Affected	link			cisagov	2022-01-12
F5	NGINX Open Source			Not Affected	link			cisagov	2022-01-12
F5	NGINX Plus			Not Affected	link			cisagov	2022-01-12
F5	NGINX Service Mesh			Not Affected	link			cisagov	2022-01-12
F5	NGINX Unit			Not Affected	link			cisagov	2022-01-12
F5	Traffix SDC	5.x (5.2.0 CF1, 5.1.0 CF-30 - 5.1.0 CF-33)		Affected	link	Vulnerable components: EMS-ELK components (Fluentd + Elastic Search + Kibana), Element Management System		cisagov	2022-01-12
FAST LTA				Unknown	link			cisagov	2022-01-12
Fastly				Unknown	link			cisagov	2022-01-12
FedEx	Ship Manager Software	Unknown		Affected	link	Note: FedEx is aware of the issue related to the Log4j Remote Code Execution vulnerability affecting various Apache products. We are actively assessing the situation and taking necessary action as appropriate. As a result, we are temporarily unable to provide a link to download the FedEx Ship Manager software or generate product keys needed for registration of FedEx Ship Manager software. We are working to have this resolved as quickly as possible and apologize for the inconvenience. For related questions or the most updated information, customers should check FedEx Updates for Apache Log4j Issue or contact their Customer Technology representative.		cisagov	2021-12-15
Fiix	Fiix CMMS Core		v5	Fixed	link	The product has been updated to Log4j version 2.15. An additional patch is being developed to update to 2.16. No user interaction is required.		cisagov	2021-12-15
FileCap				Unknown	link			cisagov	2022-01-12
FileCatalyst				Unknown	link			cisagov	2022-01-12
FileCloud				Unknown	link			cisagov	2022-01-12
FileWave				Unknown	link			cisagov	2022-01-12
FINVI				Unknown	link			cisagov	2022-01-12
FireDaemon				Unknown	link			cisagov	2022-01-12
Fisher & Paykel Healthcare				Unknown	link			cisagov	2021-12-21
Flexagon				Unknown	link			cisagov	2022-01-12
Flexera				Unknown	link			cisagov	2022-01-12
Forcepoint	DLP Manager			Unknown	link			cisagov	2022-01-12
Forcepoint	Forcepoint Cloud Security Gateway (CSG)			Unknown	link			cisagov	2022-01-12
Forcepoint	Next Generation Firewall (NGFW)			Unknown	link			cisagov	2022-01-12
Forcepoint	Next Generation Firewall, NGFW VPN Client, Forcepoint User ID service and Sidewinder			Unknown	link			cisagov	2022-01-12
Forcepoint	One Endpoint			Unknown	link			cisagov	2022-01-12
Forcepoint	Security Manager (Web, Email and DLP)			Unknown	link			cisagov	2022-01-12
Forescout				Unknown	link			cisagov	2022-01-12
ForgeRock	Autonomous Identity			Unknown	link	all other ForgeRock products Not vulnerable		cisagov	2022-01-12
Fortinet	FortiAIOps			Unknown	link			cisagov	2022-01-12
Fortinet	FortiAnalyzer			Unknown	link			cisagov	2022-01-12
Fortinet	FortiAnalyzer Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiAP			Unknown	link			cisagov	2022-01-12
Fortinet	FortiAuthenticator			Unknown	link			cisagov	2022-01-12
Fortinet	FortiCASB			Unknown	link			cisagov	2022-01-12
Fortinet	FortiConvertor			Unknown	link			cisagov	2022-01-12
Fortinet	FortiDeceptor			Unknown	link			cisagov	2022-01-12
Fortinet	FortiEDR Agent			Unknown	link			cisagov	2022-01-12
Fortinet	FortiEDR Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiGate Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiGSLB Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiMail			Unknown	link			cisagov	2022-01-12
Fortinet	FortiManager			Unknown	link			cisagov	2022-01-12
Fortinet	FortiManager Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiNAC			Unknown	link			cisagov	2022-01-12
Fortinet	FortiNAC			Unknown	link			cisagov	2022-01-12
Fortinet	FortiOS (includes FortiGate & FortiWiFi)			Unknown	link			cisagov	2022-01-12
Fortinet	FortiPhish Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiPolicy			Unknown	link			cisagov	2022-01-12
Fortinet	FortiPortal			Unknown	link			cisagov	2022-01-12
Fortinet	FortiRecorder			Unknown	link			cisagov	2022-01-12
Fortinet	FortiSIEM			Unknown	link			cisagov	2022-01-12
Fortinet	FortiSOAR			Unknown	link			cisagov	2022-01-12
Fortinet	FortiSwicth Cloud in FortiLANCloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiSwitch & FortiSwitchManager			Unknown	link			cisagov	2022-01-12
Fortinet	FortiToken Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	FortiVoice			Unknown	link			cisagov	2022-01-12
Fortinet	FortiWeb Cloud			Unknown	link			cisagov	2022-01-12
Fortinet	ShieldX			Unknown	link			cisagov	2022-01-12
FTAPI				Unknown	link			cisagov	2022-01-12
Fuji Electric	MONITOUCH TS1000 series			Not Affected	link			cisagov	2022-02-02
Fuji Electric	MONITOUCH TS1000S series			Not Affected	link			cisagov	2022-02-02
Fuji Electric	MONITOUCH TS2000 series			Not Affected	link			cisagov	2022-02-02
Fuji Electric	MONITOUCH V8 series			Not Affected	link			cisagov	2022-02-02
Fuji Electric	MONITOUCH V9 series			Not Affected	link			cisagov	2022-02-02
Fuji Electric	MONITOUCH X1 series			Not Affected	link			cisagov	2022-02-02
Fuji Electric	TELLUS and V-Server			Not Affected	link			cisagov	2022-02-02
Fuji Electric	V-SFT			Not Affected	link			cisagov	2022-02-02
Fujitsu				Unknown	link			cisagov	2022-01-12
FusionAuth	FusionAuth			Not Affected	link			cisagov	2022-01-12
GE Digital	All			Unknown	link	This advisory is available to customers only and has not been reviewed by CISA.		cisagov	2021-12-22
GE Digital Grid	All			Unknown	link	This advisory is available to customers only and has not been reviewed by CISA.		cisagov	2021-12-22
GE Gas Power	Asset Performance Management (APM)			Fixed	link	GE Digital has fixed the log4j issue on the APM. Validation and test completed in development environment and the team is currently deploying the fixes in the production environment.		cisagov	2021-12-22
GE Gas Power	Baseline Security Center (BSC)			Affected	link	GE Gas Power is still validating the workaround provided by FoxGuard in Technical Information Notice – M1221-S01.		cisagov	2021-12-22
GE Gas Power	Baseline Security Center (BSC) 2.0			Fixed	link	GE Gas Power has tested and validated the component of the BSC 2.0 that is impacted (McAfee SIEM 11.x). The update and instructions can be downloaded from link in reference section. This update is available to customer only and has not been reviewed by CISA.	Customer Portal Update	cisagov	2021-12-22
GE Gas Power	Control Server			Affected	link	Please see vCenter. Control Server is not directly impacted. It is impacted through vCenter.		cisagov	2021-12-22
GE Gas Power	MyFleet			Fixed	link	Vulnerability fixed. No user actions necessary. Updated to log4j 2.16		cisagov	2021-12-22
GE Gas Power	OPM Performance Intelligence			Fixed	link	Vulnerability fixed. No user actions necessary. Updated to log4j 2.16		cisagov	2021-12-22
GE Gas Power	OPM Performance Planning			Fixed	link	Vulnerability fixed. No user actions necessary. Updated to log4j 2.16		cisagov	2021-12-22
GE Gas Power	Tag Mapping Service			Fixed	link	Vulnerability fixed. No user actions necessary. Updated to log4j 2.16		cisagov	2021-12-22
GE Gas Power	vCenter			Fixed	link	GE Gas Power has tested and validated the update provided by Vmware. The update and instructions can be downloaded from link in reference section. This update is available to customer only and has not been reviewed by CISA.	Customer Portal Update	cisagov	2021-12-22
GE Healthcare				Unknown	link	This advisory is not available at the time of this review, due to maintence on the GE Healthcare website.		cisagov	2021-12-22
Gearset	All			Unknown	link			cisagov	2022-01-12
Genesys	All			Unknown	link			cisagov	2022-01-12
GeoServer	All			Unknown	link			cisagov	2022-01-12
GeoSolutions	GeoNetwork		A, l, l	Fixed	link			cisagov	2021-12-16
GeoSolutions	GeoServer			Not Affected	link			cisagov	2021-12-16
Gerrit Code Review	All			Unknown	link			cisagov	2022-01-12
GFI Software	All			Unknown	link			cisagov	2022-01-12
GFI Software	Kerio Connect			Fixed	link			cisagov	2022-01-12
Ghidra	All			Unknown	link			cisagov	2022-01-12
Ghisler	Total Commander			Not Affected	link	Third Party plugins might contain log4j.		cisagov	2022-01-12
Gigamon	Fabric Manager		<5.13.01.02	Fixed	link	Updates available via the Gigamon Support Portal. This advisory available to customers only and has not been reviewed by CISA.		cisagov	2021-12-21
GitHub	GitHub		GitHub.com and GitHub Enterprise Cloud	Fixed	link			cisagov	2021-12-17
GitHub	GitHub Enterprise Server		3.0.22, 3.1.14, 3.2.6, 3.3.1	Fixed	link			cisagov	2021-12-17
GitLab	All			Not Affected	link			cisagov	2022-01-12
GitLab	DAST Analyzer			Not Affected	link			cisagov	2022-01-12
GitLab	Dependency Scanning			Fixed	link			cisagov	2022-01-12
GitLab	Gemnasium-Maven			Fixed	link			cisagov	2022-01-12
GitLab	PMD OSS			Fixed	link			cisagov	2022-01-12
GitLab	SAST			Fixed	link			cisagov	2022-01-12
GitLab	Spotbugs			Fixed	link			cisagov	2022-01-12
Globus	All			Unknown	link			cisagov	2022-01-12
GoAnywhere	Agents			Fixed	link			cisagov	2021-12-18
GoAnywhere	Gateway		Version 2.7.0 or later	Fixed	link			cisagov	2021-12-18
GoAnywhere	MFT		Version 5.3.0 or later	Fixed	link			cisagov	2021-12-18
GoAnywhere	MFT Agents	1.4.2 or later		Affected	link	Versions less than GoAnywhere Agent version 1.4.2 are not affected.		cisagov	2021-12-18
GoAnywhere	Open PGP Studio			Fixed	link			cisagov	2021-12-18
GoAnywhere	Suveyor/400			Not Affected	link			cisagov	2021-12-18
GoCD	All			Unknown	link			cisagov	2022-01-12
Google	Chrome			Not Affected	link	Chrome Browser releases, infrastructure and admin console are not using versions of Log4j affected by the vulnerability.		cisagov	2022-01-14
Google Cloud	Access Transparency			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Actifio			Not Affected	link	Actifio has identified limited exposure to the Log4j 2 vulnerability and has released a hotfix to address this vulnerability. Visit https://now.actifio.com for the full statement and to obtain the hotfix (available to Actifio customers only).		cisagov	2021-12-21
Google Cloud	AI Platform Data Labeling			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AI Platform Neural Architecture Search (NAS)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AI Platform Training and Prediction			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Anthos			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Anthos environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Anthos Config Management			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Anthos Connect			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Anthos Hub			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Anthos Identity Service			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Anthos on VMWare			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. We strongly encourage customers to check VMware recommendations documented in VMSA-2021-0028 and deploy fixes or workarounds to their VMware products as they become available. We also recommend customers review their respective applications and workloads affected by the same vulnerabilities and apply appropriate patches.		cisagov	2021-12-21
Google Cloud	Anthos Premium Software			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Anthos Service Mesh			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Apigee			Not Affected	link	Apigee installed Log4j 2 in its Apigee Edge VMs, but the software was not used and therefore the VMs were not impacted by the issues in CVE-2021-44228 and CVE-2021-45046. Apigee updated Log4j 2 to v.2.16 as an additional precaution. It is possible that customers may have introduced custom resources that are using vulnerable versions of Log4j. We strongly encourage customers who manage Apigee environments to identify components dependent on Log4j and update them to the latest version. Visit the Apigee Incident Report for more information.		cisagov	2021-12-17
Google Cloud	App Engine			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage App Engine environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	AppSheet			Not Affected	link	The AppSheet core platform runs on non-JVM (non-Java) based runtimes. At this time, we have identified no impact to core AppSheet functionality. Additionally, we have patched one Java-based auxiliary service in our platform. We will continue to monitor for affected services and patch or remediate as required. If you have any questions or require assistance, contact AppSheet Support.		cisagov	2021-12-21
Google Cloud	Artifact Registry			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Assured Workloads			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AutoML			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AutoML Natural Language			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AutoML Tables			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AutoML Translation			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AutoML Video			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	AutoML Vision			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	BigQuery			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	BigQuery Data Transfer Service			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	BigQuery Omni			Not Affected	link	BigQuery Omni, which runs on AWS and Azure infrastructure, does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. We continue to work with AWS and Azure to assess the situation.		cisagov	2021-12-19
Google Cloud	Binary Authorization			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Certificate Manager			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Chronicle			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Asset Inventory			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Bigtable			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Cloud Build			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Cloud Build environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Cloud CDN			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Composer			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Cloud Composer does not use Log4j 2 and is not impacted by the issues in CVE-2021-44228 and CVE-2021-45046. It is possible that customers may have imported or introduced other dependencies via DAGs, installed PyPI modules, plugins, or other services that are using vulnerable versions of Log4j 2. We strongly encourage customers, who manage Composer environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-15
Google Cloud	Cloud Console App			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Data Loss Prevention			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Debugger			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Deployment Manager			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud DNS			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Endpoints			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud External Key Manager (EKM)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Functions			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Cloud Functions environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Cloud Hardware Security Module (HSM)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Interconnect			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Intrusion Detection System (IDS)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Key Management Service			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Load Balancing			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Logging			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Natural Language API			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Network Address Translation (NAT)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Profiler			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Router			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Run			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Cloud Run environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Cloud Run for Anthos			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Cloud Run for Anthos environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Cloud Scheduler			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud SDK			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Shell			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Cloud Shell environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Cloud Source Repositories			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Spanner			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Cloud SQL			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Cloud Storage			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Tasks			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Trace			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Traffic Director			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Cloud Translation			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Vision			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud Vision OCR On-Prem			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Cloud VPN			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	CompilerWorks			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Compute Engine			Not Affected	link	Compute Engine does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. For those using Google Cloud VMware Engine, we are working with VMware and tracking VMSA-2021-0028.1. We will deploy fixes to Google Cloud VMware Engine as they become available.		cisagov	2021-12-20
Google Cloud	Contact Center AI (CCAI)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Contact Center AI Insights			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Container Registry			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Data Catalog			Not Affected	link	Data Catalog has been updated to mitigate the issues identified in CVE-2021-44228 and CVE-2021-45046. We strongly encourage customers who introduced their own connectors to identify dependencies on Log4j 2 and update them to the latest version.		cisagov	2021-12-20
Google Cloud	Data Fusion			Not Affected	link	Data Fusion does not use Log4j 2, but uses Dataproc as one of the options to execute pipelines. Dataproc released new images on December 18, 2021 to address the vulnerability in CVE-2021-44228 and CVE-2021-45046. Customers must follow instructions in a notification sent on December 18, 2021 with the subject line “Important information about Data Fusion.”		cisagov	2021-12-20
Google Cloud	Database Migration Service (DMS)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Dataflow			Not Affected	link	Dataflow does not use Log4j 2 and is not impacted by the issues in CVE-2021-44228 and CVE-2021-45046. If you have changed dependencies or default behavior, it is strongly recommended you verify there is no dependency on vulnerable versions Log4j 2. Customers have been provided details and instructions in a notification sent on December 17, 2021 with the subject line “Update #1 to Important information about Dataflow.”		cisagov	2021-12-17
Google Cloud	Dataproc			Not Affected	link	Dataproc released new images on December 18, 2021 to address the vulnerabilities in CVE-2021-44228 and CVE-2021-45046. Customers must follow the instructions in notifications sent on December 18, 2021 with the subject line “Important information about Dataproc” with Dataproc documentation.		cisagov	2021-12-20
Google Cloud	Dataproc Metastore			Not Affected	link	Dataproc Metastore has been updated to mitigate the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers who need to take actions were sent two notifications with instructions on December 17, 2021 with the subject line “Important information regarding Log4j 2 vulnerability in your gRPC-enabled Dataproc Metastore.”		cisagov	2021-12-20
Google Cloud	Datastore			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Datastream			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Dialogflow Essentials (ES)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Document AI			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Event Threat Detection			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Eventarc			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Filestore			Not Affected	link	Log4j 2 is contained within the Filestore service; there is a technical control in place that mitigates the vulnerabilities in CVE-2021-44228 and CVE-2021-45046. Log4j 2 will be updated to the latest version as part of the scheduled rollout in January 2022.		cisagov	2021-12-21
Google Cloud	Firebase			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Firestore			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Game Servers			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Google Cloud Armor			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Google Cloud Armor Managed Protection Plus			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Google Cloud VMware Engine			Not Affected	link	We are working with VMware and tracking VMSA-2021-0028.1. We will deploy fixes as they become available.		cisagov	2021-12-11
Google Cloud	Google Kubernetes Engine			Not Affected	link	Google Kubernetes Engine does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Google Kubernetes Engine environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-21
Google Cloud	Healthcare Data Engine (HDE)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Human-in-the-Loop AI			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	IoT Core			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Key Access Justifications (KAJ)			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Looker			Not Affected	link	\Looker-hosted instances have been updated to a Looker version with Log4j v2.16. Looker is currently working with third-party driver vendors to evaluate the impact of the Log4j vulnerability. As Looker does not enable logging for these drivers in Looker-hosted instances, no messages are logged. We conclude that the vulnerability is mitigated. We continue to actively work with the vendors to deploy a fix for these drivers. Looker customers who self-manage their Looker instances have received instructions through their technical contacts on how to take the necessary steps to address the vulnerability. Looker customers who have questions or require assistance, please visit Looker Support.		cisagov	2021-12-18
Google Cloud	Media Translation API			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Memorystore			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-19
Google Cloud	Migrate for Anthos			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Migrate for Compute Engine (M4CE)			Not Affected	link	M4CE has been updated to mitigate the issues identified in CVE-2021-44228 and CVE-2021-45046. M4CE has been updated to version 4.11.9 to address the vulnerabilities. A notification was sent to customers on December 17, 2021 with subject line “Important information about CVE-2021-44228 and CVE-2021-45046” for M4CE V4.11 or below. If you are on M4CE v5.0 or above, no action is needed.		cisagov	2021-12-19
Google Cloud	Network Connectivity Center			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Network Intelligence Center			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Network Service Tiers			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Persistent Disk			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Pub/Sub			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-16
Google Cloud	Pub/Sub Lite			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046. Customers may have introduced a separate logging solution that uses Log4j 2. We strongly encourage customers who manage Pub/Sub Lite environments to identify components dependent on Log4j 2 and update them to the latest version.		cisagov	2021-12-16
Google Cloud	reCAPTCHA Enterprise			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Recommendations AI			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Retail Search			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Risk Manager			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Secret Manager			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Security Command Center			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Service Directory			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Service Infrastructure			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Speaker ID			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Speech-to-Text			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Speech-to-Text On-Prem			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Storage Transfer Service			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Talent Solution			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Text-to-Speech			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Transcoder API			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Transfer Appliance			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Video Intelligence API			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Virtual Private Cloud			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-20
Google Cloud	Web Security Scanner			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Google Cloud	Workflows			Not Affected	link	Product does not use Log4j 2 and is not impacted by the issues identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2021-12-21
Gradle	All			Not Affected	link	Gradle Scala Compiler Plugin depends upon log4j-core but it is not used.		cisagov	2022-01-12
Gradle	Gradle Enterprise		< 2021.3.6	Fixed	link			cisagov	2022-01-12
Gradle	Gradle Enterprise Build Cache Node		< 10.1	Fixed	link			cisagov	2022-01-12
Gradle	Gradle Enterprise Test Distribution Agent		< 1.6.2	Fixed	link			cisagov	2022-01-12
Grafana	All			Not Affected	link			cisagov	2022-01-12
Grandstream	All			Unknown	link			cisagov	2022-01-12
Gravitee	Access Management			Not Affected	link			cisagov	2022-01-12
Gravitee	Access Management			Not Affected	link			cisagov	2022-01-12
Gravitee	Alert Engine			Not Affected	link			cisagov	2022-01-12
Gravitee	Alert Engine			Not Affected	link			cisagov	2022-01-12
Gravitee	API Management			Not Affected	link			cisagov	2022-01-12
Gravitee	API Management			Not Affected	link			cisagov	2022-01-12
Gravitee	Cockpit			Not Affected	link			cisagov	2022-01-12
Gravwell	All			Not Affected	link	Gravwell products do not use Java.		cisagov	2022-01-12
Graylog	All		3.3.15, 4.0.14, 4.1.9, 4.2.3	Fixed	link	The vulnerable Log4j library is used to record GrayLogs own log information. Vulnerability is not triggered when GrayLog stores exploitation vector from an outer system.		cisagov	2022-01-12
Graylog	Graylog Server		All versions >= 1.2.0 and <= 4.2.2	Fixed	link			cisagov	2022-01-12
GreenShot	All			Not Affected	link			cisagov	2022-01-12
GSA	Cloud.gov			Unknown	link			cisagov	2021-12-21
GuardedBox	All		3.1.2	Fixed	link			cisagov	2022-01-12
Guidewire	All			Unknown	link			cisagov	2022-01-12
HAProxy				Unknown	link			cisagov	2022-01-12
HarmanPro AMX				Unknown	link			cisagov	2022-01-12
HashiCorp	Boundary			Unknown	link			cisagov	2022-01-12
HashiCorp	Consul			Unknown	link			cisagov	2022-01-12
HashiCorp	Consul Enterprise			Unknown	link			cisagov	2022-01-12
HashiCorp	Nomad			Unknown	link			cisagov	2022-01-12
HashiCorp	Nomad Enterprise			Unknown	link			cisagov	2022-01-12
HashiCorp	Packer			Unknown	link			cisagov	2022-01-12
HashiCorp	Terraform			Unknown	link			cisagov	2022-01-12
HashiCorp	Terraform Enterprise			Unknown	link			cisagov	2022-01-12
HashiCorp	Vagrant			Unknown	link			cisagov	2022-01-12
HashiCorp	Vault			Unknown	link			cisagov	2022-01-12
HashiCorp	Vault Enterprise			Unknown	link			cisagov	2022-01-12
HashiCorp	Waypoint			Unknown	link			cisagov	2022-01-12
HCL Software	BigFix Compliance			Not Affected	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HCL Software	BigFix Insights			Not Affected	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HCL Software	BigFix Insights for Vulnerability Remediation			Not Affected	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HCL Software	BigFix Inventory		< 10.0.7	Fixed	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HCL Software	BigFix Lifecycle			Not Affected	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HCL Software	BigFix Mobile			Not Affected	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HCL Software	BigFix Patch			Not Affected	link	Not Affected for related CVE-2021-45046		cisagov	2021-12-15
HelpSystems Clearswift				Unknown	link			cisagov	2022-01-12
HENIX	Squash TM		1.21.7-1.22.9, 2.0.3-2.1.5, 2.2.0-3.0.2	Fixed	link			cisagov	2021-12-23
Hexagon				Unknown	link			cisagov	2022-01-12
Hikvision				Unknown	link			cisagov	2022-01-12
Hitachi Energy	3rd party - Elastic Search, Kibana		Elasticsearch 5.0.0+	Fixed	link	Set the JVM option -Dlog4j2.formatMsgNoLookups=true and restart each node of the cluster.		cisagov	2022-01-05
Hitachi Energy	3rd party - Oracle Database Components		12.1, 12.2, 19c	Fixed	link	As this is a third-party component, a separate patch management report will be provided to customers with the steps to apply the Oracle provided patches for these components.		cisagov	2022-01-05
Hitachi Energy	Axis		3.6	Fixed	link	No action is required by customers. Axis is a fully SaaS hosted solution and the environment has been patched per the recommendations		cisagov	2022-01-05
Hitachi Energy	Counterparty Settlement and Billing (CSB)		v6	Fixed	link			cisagov	2022-01-05
Hitachi Energy	e-Mesh Monitor			Unknown	link	No end-user action needed. The affected e-Mesh Monitor part is at the cloud offering side of which the remediation is handled by Hitachi Energy team. Remediation is currently ongoing, and during this time period, e-Mesh Monitor edge device is not able to upload data to cloud.		cisagov	2022-01-05
Hitachi Energy	eSOMS			Unknown	link			cisagov	2022-01-12
Hitachi Energy	FOXMAN-UN		R15A, R14B, R14A, R11B SP1	Fixed	link	A patch is available for releases R15A, R14B, R14A and R11B SP1. . For details on how to apply such patch, please refer to the technical bulletin “FOXMAN-UN - Installation of Log4j Patch”, version A (1KHW029176) available in the Hitachi Energy Customer Connect Portal.		cisagov	2022-01-05
Hitachi Energy	FOXMAN-UN		R11A and R10 series	Fixed	link	Apply General Mitigations and upgrade to latest version. For upgrades, please get in touch with your Hitachi Energy contacts.		cisagov	2022-01-05
Hitachi Energy	Lumada APM On-premises			Unknown	link	See vendor advisory for instructions for various versions.		cisagov	2022-01-05
Hitachi Energy	Lumada APM SaaS offering			Unknown	link	No action is required by customers. The SaaS offering has been patched per the recommendations.		cisagov	2022-01-05
Hitachi Energy	Lumada EAM / FSM		v1.7.x, v1.8.x, v1.9.x	Fixed	link	See Section Mitigation Strategy in vendor advisory.		cisagov	2022-01-05
Hitachi Energy	MMS Internal facing subcomponent.			Unknown	link			cisagov	2022-01-05
Hitachi Energy	Network Manager ADMS Network Model Server		9.1.0.32-9.1.0.44	Fixed	link	See vendor advisory for instructions on mitigation steps.		cisagov	2022-01-05
Hitachi Energy	Network Manager Outage Management Interface (CMI)		9.0-9.10.44, 9.1.1, 10.3.4	Fixed	link	See vendor advisory for instructions on mitigation steps.		cisagov	2022-01-05
Hitachi Energy	nMarket Global I-SEM		3.7.15, 3.7.16	Fixed	link			cisagov	2022-01-05
Hitachi Energy	RelCare		2.0.0	Fixed	link	No action is required by customers. The RelCare SaaS hosted solution and the on-premises have been patched per the recommendations.		cisagov	2022-01-05
Hitachi Energy	UNEM		R15A, R14B, R14A, R11B SP1	Fixed	link	A patch is available for releases R15A, R14B, R14A and R11B SP1. For details on how to apply such patch, please refer to the technical bulletin “UNEM - Installation of Log4j Patch”, version A (1KHW029176) available in the Hitachi Energy Customer Connect Portal.		cisagov	2022-01-05
Hitachi Energy	UNEM		R11A and R10 series	Fixed	link	Apply General Mitigations and upgrade to latest version. For upgrades, please get in touch with your Hitachi Energy contacts.		cisagov	2022-01-05
Hitachi Vantara				Unknown	link			cisagov	2022-01-12
HMS Industrial Networks AB	Cosy, Flexy and Ewon CD			Unknown	link			cisagov	2022-01-05
HMS Industrial Networks AB	eCatcher Mobile applications			Unknown	link			cisagov	2022-01-05
HMS Industrial Networks AB	eCatcher Windows software			Unknown	link			cisagov	2022-01-05
HMS Industrial Networks AB	Netbiter Hardware including EC, WS, and LC			Unknown	link			cisagov	2022-01-05
HMS Industrial Networks AB	Talk2M including M2Web			Unknown	link			cisagov	2022-01-05
HOLOGIC	Advanced Workflow Manager (AWM)			Unknown	link	While the Hologic software itself does not utilize Java/Log4J, the installed APC PowerChute UPS with Business Edition v9.5 software installed may. APC is still assessing its PowerChute software to determine if it is vulnerable.		cisagov	2021-12-20
HOLOGIC	Affirm Prone Biopsy System			Unknown	link			cisagov	2021-12-20
HOLOGIC	Brevera Breast Biopsy System			Unknown	link			cisagov	2021-12-20
HOLOGIC	Cenova Image Analytics Server			Unknown	link			cisagov	2021-12-20
HOLOGIC	Dimensions / 3Dimensions Mammography System			Unknown	link			cisagov	2021-12-20
HOLOGIC	Discovery Bone Densitometer			Unknown	link			cisagov	2021-12-20
HOLOGIC	Faxitron CT Specimen Radiography System			Unknown	link	While the Hologic software itself does not utilize Java/Log4J, there is a utility program installed that may utilize Java and Log4J. This utility program does not run on startup and is not required for system operation. Please contact Hologic Service for assistance in removing this program.		cisagov	2021-12-20
HOLOGIC	Faxitron Specimen Radiography Systems			Unknown	link			cisagov	2021-12-20
HOLOGIC	Fluoroscan Insight Mini C-Arm			Unknown	link			cisagov	2021-12-20
HOLOGIC	Horizon DXA Bone Densitometer			Unknown	link			cisagov	2021-12-20
HOLOGIC	Rosetta DC Tomosynthesis Data Converter			Unknown	link			cisagov	2021-12-20
HOLOGIC	SecurView DX Workstation			Unknown	link			cisagov	2021-12-20
HOLOGIC	SecurXChange Router			Unknown	link			cisagov	2021-12-20
HOLOGIC	SuperSonic Imagine Ultrasound Products (Aixplorer & Aixplorer Mach)			Unknown	link			cisagov	2021-12-20
HOLOGIC	Trident HD Specimen Radiography System			Unknown	link			cisagov	2021-12-20
HOLOGIC	Unifi Workspace			Unknown	link	While the Hologic software itself does not utilize Java/Log4J, the installed APC PowerChute UPS with Business Edition v9.5 software installed may. APC is still assessing its PowerChute software to determine if it is vulnerable.		cisagov	2021-12-20
HOLOGIC	Windows Selenia Mammography System			Unknown	link			cisagov	2021-12-20
Honeywell				Unknown	link			cisagov	2022-01-12
HP	Teradici Cloud Access Controller		< v113	Fixed	link			cisagov	2021-12-17
HP	Teradici EMSDK		< 1.0.6	Fixed	link			cisagov	2021-12-17
HP	Teradici Management Console		< 21.10.3	Fixed	link			cisagov	2021-12-17
HP	Teradici PCoIP Connection Manager		< 21.03.6, < 20.07.4	Fixed	link			cisagov	2021-12-17
HP	Teradici PCoIP License Server			Unknown	link			cisagov	2021-12-17
HPE	3PAR StoreServ Arrays			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	AirWave Management Platform			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Alletra 6000			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Alletra 9k			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba Central			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba ClearPass Policy Manager			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba ClearPass Policy Manager			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba Instant (IAP)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba Location Services			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba NetEdit			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba PVOS Switches			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba SDN VAN Controller			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba User Experience Insight (UXI)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Aruba VIA Client			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	ArubaOS SD-WAN Controllers and Gateways			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	ArubaOS Wi-Fi Controllers and Gateways			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	ArubaOS-CX switches			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	ArubaOS-S switches			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	BladeSystem Onboard Administrator			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Brocade 16Gb Fibre Channel SAN Switch for HPE Synergy			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Brocade 16Gb SAN Switch for HPE BladeSystem c-Class			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Brocade 32Gb Fibre Channel SAN Switch for HPE Synergy			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Brocade Network Advisor			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	CloudAuth			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	CloudPhysics			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Compute Cloud Console			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Compute operations manager- FW UPDATE SERVICE			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	COS (Cray Operating System)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Cray Systems Management (CSM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Custom SPP Portal Link			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Data Services Cloud Console			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Harmony Data Platform			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HOP public services (grafana, vault, rancher, Jenkins)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN2600B SAN Extension Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN4000B SAN Extension Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN6000B Fibre Channel Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN6500B Fibre Channel Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN6600B Fibre Channel Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN6650B Fibre Channel Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE B-series SN6700B Fibre Channel Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Customer Experience Assurance (CEA)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Hardware Support Manager plug-in for VMware vSphere Lifecycle Manager			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Home Location Register (HLR/I-HLR)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Infosight for Servers			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Integrated Home Subscriber Server (I-HSS)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Intelligent Messaging (IM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Intelligent Network Server (INS)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Multimedia Services Environment (MSE)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE OC Convergent Communications Platform (OCCP)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE OC Media Platform Media Resource Function (OCMP-MRF)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE OC Service Access Controller (OC SAC)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE OC Service Controller (OCSC)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE OC Universal Signaling Platform (OC-USP-M)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE OneView			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE OneView for VMware vRealize Operations (vROps)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE OneView Global Dashboard			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Performance Cluster Manager (HPCM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Performance Manager (PM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Position Determination Entity (PDE)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Secure Identity Broker (SIB)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Service Activator (SA)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Service Governance Framework (SGF)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Service Orchestration Manager (SOM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Service Provisioner (SP)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Short Message Point-to-Point Gateway (SMPP)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Slingshot			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Smart Interaction Server (SIS)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE SN3000B Fibre Channel Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE SN8000B 4-Slot SAN Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE SN8000B 8-Slot SAN Backbone Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE SN8600B 4-Slot SAN Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE SN8600B 8-Slot SAN Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE SN8700B 4-Slot Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE SN8700B 8-Slot Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Subscriber, Network, and Application Policy (SNAP)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Subscription Manager (SM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Synergy Image Streamer			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Systems Insight Manager (SIM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Telecom Application Server (TAS)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Unified Correlation and Automation (UCA)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Unified Mediation Bus (UMB)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Unified OSS Console (UOC)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Unified Topology Manager (UTM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Universal Identity Repository (VIR)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Universal SLA Manager (uSLAM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Virtual Connect			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Virtual Connect Enterprise Manager (VCEM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Virtual Provisioning Gateway (vPGW)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Virtual Server Environment (VSE)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	HPE Virtual Subscriber Data Management (vSDM)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE WebRTC Gateway Controller (WGW)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-14
HPE	HPE Wi-Fi Authentication Gateway (WauG)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Insight Cluster Management Utility (CMU)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrated Lights-Out (iLO) Amplifier Pack			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrated Lights-Out 4 (iLO 4)			Not Affected	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrated Lights-Out 5 (iLO 5)			Not Affected	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrity BL860c, BL870c, BL890c			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrity Rx2800/Rx2900			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrity Superdome 2			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Integrity Superdome X			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Intelligent Provisioning			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	iSUT integrated smart update tool			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Maven Artifacts (Atlas)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	MSA			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	NetEdit			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Nimble Storage			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	NS-T0634-OSM CONSOLE TOOLS			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	NS-T0977-SCHEMA VALIDATOR			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	OfficeConnect			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Primera Storage			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	RepoServer part of OPA (on Premises aggregator)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Resource Aggregator for Open Distributed Infrastructure Management			Not Affected	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	RESTful Interface Tool (iLOREST)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SAT (System Admin Toolkit)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Scripting Tools for Windows PowerShell (HPEiLOCmdlets)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SGI MC990 X Server			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SGI UV 2000 Server			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SGI UV 300, 300H, 300RL, 30EX			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SGI UV 3000 Server			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SN8700B 8-Slot Director Switch			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	StoreEasy			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	StoreEver CVTL			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	StoreEver LTO Tape Drives			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	StoreEver MSL Tape Libraries			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	StoreOnce			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	SUM (Smart Update Manager)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Superdome Flex 280			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	Superdome Flex Server			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE	UAN (User Access Node)			Unknown	link	Support Communication Cross Reference ID: SIK7387		cisagov	2021-12-12
HPE/Micro Focus	Data Protector		9.09	Fixed	link		https://portal.microfocus.com/s/article/KM000003050	cisagov	2021-12-17
Huawei				Unknown	link			cisagov	2022-01-12
Hubspot				Unknown	link			cisagov	2022-01-12
I-Net software				Unknown	link			cisagov	2022-01-12
I2P				Unknown	link			cisagov	2022-01-12
IBA-AG				Unknown	link			cisagov	2022-01-12
Ibexa				Unknown	link			cisagov	2022-01-12
IBM	Analytics Engine			Unknown	link			cisagov	2021-12-15
IBM	App Configuration			Unknown	link			cisagov	2021-12-15
IBM	App Connect			Unknown	link			cisagov	2021-12-15
IBM	App ID			Unknown	link			cisagov	2021-12-15
IBM	Application Gateway			Unknown	link			cisagov	2021-12-15
IBM	Aspera			Unknown	link			cisagov	2021-12-15
IBM	Aspera Endpoint			Unknown	link			cisagov	2021-12-15
IBM	Aspera Enterprise			Unknown	link			cisagov	2021-12-15
IBM	Aspera fasp.io			Unknown	link			cisagov	2021-12-15
IBM	Bare Metal Servers			Unknown	link			cisagov	2021-12-15
IBM	BigFix Compliance			Unknown				cisagov	2022-01-12
IBM	BigFix Inventory	VM Manager Tool & SAP Tool		Affected		To verify if your instance is affected, go to the lib subdirectory of the tool (BESClient/LMT/SAPTOOL and BESClient/LMT/VMMAN) and check what version of log4j is included. Version is included in the name of the library.		cisagov	2022-01-12
IBM	Block Storage			Unknown	link			cisagov	2021-12-15
IBM	Block Storage for VPC			Unknown	link			cisagov	2021-12-15
IBM	Block Storage Snapshots for VPC			Unknown	link			cisagov	2021-12-15
IBM	Case Manager			Unknown	link			cisagov	2021-12-15
IBM	Certificate Manager			Unknown	link			cisagov	2021-12-15
IBM	Client VPN for VPC			Unknown	link			cisagov	2021-12-15
IBM	Cloud Activity Tracker			Unknown	link			cisagov	2021-12-15
IBM	Cloud Backup			Unknown	link			cisagov	2021-12-15
IBM	Cloud Monitoring			Unknown	link			cisagov	2021-12-15
IBM	Cloud Object Storage			Unknown	link			cisagov	2021-12-15
IBM	Cloud Object Storage			Unknown	link			cisagov	2021-12-15
IBM	Cloudant			Unknown	link			cisagov	2021-12-15
IBM	Code Engine			Unknown	link			cisagov	2021-12-15
IBM	Cognos Command Center			Unknown	link			cisagov	2021-12-15
IBM	Cognos Controller	10.4.2		Affected	link			cisagov	2021-12-15
IBM	Cognos Integration Server			Unknown	link			cisagov	2021-12-15
IBM	Compose Enterprise			Unknown	link			cisagov	2021-12-15
IBM	Compose for Elasticsearch			Unknown	link			cisagov	2021-12-15
IBM	Compose for etcd			Unknown	link			cisagov	2021-12-15
IBM	Compose for MongoDB			Unknown	link			cisagov	2021-12-15
IBM	Compose for MySQL			Unknown	link			cisagov	2021-12-15
IBM	Compose for PostgreSQL			Unknown	link			cisagov	2021-12-15
IBM	Compose for RabbitMQ			Unknown	link			cisagov	2021-12-15
IBM	Compose for Redis			Unknown	link			cisagov	2021-12-15
IBM	Compose for RethinkDB			Unknown	link			cisagov	2021-12-15
IBM	Compose for ScyllaDB			Unknown	link			cisagov	2021-12-15
IBM	Container Registry			Unknown	link			cisagov	2021-12-15
IBM	Container Security Services			Unknown	link			cisagov	2021-12-15
IBM	Content Delivery Network			Unknown	link			cisagov	2021-12-15
IBM	Continuous Delivery			Unknown	link			cisagov	2021-12-15
IBM	Copy Services Manager			Unknown	link			cisagov	2021-12-15
IBM	Databases for DataStax			Unknown	link			cisagov	2021-12-15
IBM	Databases for EDB			Unknown	link			cisagov	2021-12-15
IBM	Databases for Elasticsearch			Unknown	link			cisagov	2021-12-15
IBM	Databases for etcd			Unknown	link			cisagov	2021-12-15
IBM	Databases for MongoDB			Unknown	link			cisagov	2021-12-15
IBM	Databases for PostgreSQL			Unknown	link			cisagov	2021-12-15
IBM	Databases for Redis			Unknown	link			cisagov	2021-12-15
IBM	Datapower Gateway			Unknown	link			cisagov	2021-12-15
IBM	Dedicated Host for VPC			Unknown	link			cisagov	2021-12-15
IBM	Direct Link Connect			Unknown	link			cisagov	2021-12-15
IBM	Direct Link Connect on Classic			Unknown	link			cisagov	2021-12-15
IBM	Direct Link Dedicated (2.0)			Unknown	link			cisagov	2021-12-15
IBM	Direct Link Dedicated Hosting on Classic			Unknown	link			cisagov	2021-12-15
IBM	Direct Link Dedicated on Classic			Unknown	link			cisagov	2021-12-15
IBM	Direct Link Exchange on Classic			Unknown	link			cisagov	2021-12-15
IBM	DNS Services			Unknown	link			cisagov	2021-12-15
IBM	Emptoris Contract Management			Unknown	link			cisagov	2021-12-15
IBM	Emptoris Program Management			Unknown	link			cisagov	2021-12-15
IBM	Emptoris Sourcing			Unknown	link			cisagov	2021-12-15
IBM	Emptoris Spend Analysis			Unknown	link			cisagov	2021-12-15
IBM	Emptoris Supplier Lifecycle Management			Unknown	link			cisagov	2021-12-15
IBM	Enterprise Tape Controller Model C07 (3592) (ETC)			Unknown	link			cisagov	2021-12-15
IBM	Event Notifications			Unknown	link			cisagov	2021-12-15
IBM	Event Streams			Unknown	link			cisagov	2021-12-15
IBM	File Storage			Unknown	link			cisagov	2021-12-15
IBM	Flash System 900 (& 840)			Unknown	link			cisagov	2021-12-15
IBM	Flow Logs for VPC			Unknown	link			cisagov	2021-12-15
IBM	Functions			Unknown	link			cisagov	2021-12-15
IBM	GSKit			Unknown	link			cisagov	2021-12-15
IBM	Guardium S-TAP for Data Sets on z/OS			Unknown	link			cisagov	2021-12-15
IBM	Guardium S-TAP for DB2 on z/OS			Unknown	link			cisagov	2021-12-15
IBM	Guardium S-TAP for IMS on z/OS			Unknown	link			cisagov	2021-12-15
IBM	Hyper Protect Crypto Services			Unknown	link			cisagov	2021-12-15
IBM	Hyper Protect DBaaS for MongoDB			Unknown	link			cisagov	2021-12-15
IBM	Hyper Protect DBaaS for PostgreSQL			Unknown	link			cisagov	2021-12-15
IBM	Hyper Protect Virtual Server			Unknown	link			cisagov	2021-12-15
IBM	i2 Analyst’s Notebook			Unknown	link			cisagov	2021-12-15
IBM	i2 Base			Unknown	link			cisagov	2021-12-15
IBM	IBM Application Runtime Expert for i			Unknown	link			cisagov	2021-12-15
IBM	IBM Backup, Recovery and Media Services for i			Unknown	link			cisagov	2021-12-15
IBM	IBM Db2 Mirror for i			Unknown	link			cisagov	2021-12-15
IBM	IBM HTTP Server			Unknown	link			cisagov	2021-12-15
IBM	IBM i Access Family			Unknown	link			cisagov	2021-12-15
IBM	IBM i Portfolio of products under the Group SWMA			Unknown	link			cisagov	2021-12-15
IBM	IBM PowerHA System Mirror for i			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Direct Browser User Interface			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Direct File Agent	See Vendor Links		Affected	link		https://www.ibm.com/support/pages/node/6526688, https://www.ibm.com/support/pages/node/6528324, https://www.ibm.com/blogs/psirt/an-update-on-the-apache-log4j-cve-2021-44228-vulnerability/	cisagov	2021-12-20
IBM	IBM Sterling Connect:Direct for HP NonStop			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Direct for i5/OS			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Direct for OpenVMS			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Express for Microsoft Windows			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Express for UNIX			Unknown	link			cisagov	2021-12-15
IBM	IBM Sterling Connect:Express for z/OS			Unknown	link			cisagov	2021-12-15
IBM	Instana Agent	Timestamp lower than 12-11-2021		Affected	link			cisagov	2021-12-14
IBM	Internet Services			Unknown	link			cisagov	2021-12-15
IBM	Key Lifecycle Manager for z/OS			Unknown	link			cisagov	2021-12-15
IBM	Key Protect			Unknown	link			cisagov	2021-12-15
IBM	Knowledge Studio			Unknown	link			cisagov	2021-12-15
IBM	Kubernetes Service			Unknown	link			cisagov	2021-12-15
IBM	Load Balancer for VPC			Unknown	link			cisagov	2021-12-15
IBM	Log Analysis			Unknown	link			cisagov	2021-12-15
IBM	Managed VMware Service			Unknown	link			cisagov	2021-12-15
IBM	Management Extender for VMware vCenter			Unknown				cisagov	2022-01-12
IBM	Mass Data Migration			Unknown	link			cisagov	2021-12-15
IBM	Maximo EAM SaaS			Unknown	link			cisagov	2021-12-15
IBM	Message Hub			Unknown	link			cisagov	2021-12-15
IBM	MQ Appliance			Unknown	link			cisagov	2021-12-15
IBM	MQ on IBM Cloud			Unknown	link			cisagov	2021-12-15
IBM	Natural Language Understanding			Unknown	link			cisagov	2021-12-15
IBM	OmniFind Text Search Server for DB2 for i			Unknown	link			cisagov	2021-12-15
IBM	OPENBMC			Unknown	link			cisagov	2021-12-15
IBM	Planning Analytics Workspace	>2.0.57		Affected	link			cisagov	2021-12-15
IBM	Power HMC	V9.2.950.0 & V10.1.1010.0		Affected	link			cisagov	2021-12-15
IBM	PowerSC			Unknown	link			cisagov	2021-12-15
IBM	PowerVM Hypervisor			Unknown	link			cisagov	2021-12-15
IBM	PowerVM VIOS			Unknown	link			cisagov	2021-12-15
IBM	QRadar Advisor			Unknown	link			cisagov	2021-12-15
IBM	Qradar Network Threat Analytics			Unknown	link			cisagov	2021-12-15
IBM	QRadar SIEM			Unknown	link			cisagov	2021-12-15
IBM	Quantum Services			Unknown	link			cisagov	2021-12-15
IBM	Rational Developer for AIX and Linux			Unknown	link			cisagov	2021-12-15
IBM	Rational Developer for i			Unknown	link			cisagov	2021-12-15
IBM	Red Hat OpenShift on IBM Cloud			Unknown	link			cisagov	2021-12-15
IBM	Resilient			Unknown				cisagov	2022-01-12
IBM	Robotic Process Automation			Unknown	link			cisagov	2021-12-15
IBM	SAN Volume Controller and Storwize Family			Unknown	link			cisagov	2021-12-15
IBM	Satellite Infrastructure Service			Unknown	link			cisagov	2021-12-15
IBM	Schematics			Unknown	link			cisagov	2021-12-15
IBM	Secrets Manager			Unknown	link			cisagov	2021-12-15
IBM	Secure Gateway			Unknown	link			cisagov	2021-12-15
IBM	Server Automation			Unknown				cisagov	2022-01-12
IBM	Spectrum Archive Library Edition			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Discover			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Client Management Service			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for Databases: Data Protection for Oracle			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for Databases: Data Protection for SQL			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for Enterprise Resource Planning			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for Mail: Data Protection for Domino			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for Mail: Data Protection for Exchange			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for Workstations			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect for z/OS USS Client and API			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Plus Db2 Agent			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Plus Exchange Agent			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Plus File Systems Agent			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Plus MongoDB Agent			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Plus O365 Agent			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Server			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Snapshot for UNIX			Unknown	link			cisagov	2021-12-15
IBM	Spectrum Protect Snapshot for UNIX			Unknown	link			cisagov	2021-12-15
IBM	SQL Query			Unknown	link			cisagov	2021-12-15
IBM	Sterling Gentran			Unknown	link			cisagov	2021-12-15
IBM	Sterling Order Management			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for ACORD			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for Financial Services			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for FIX			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for NACHA			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for PeopleSoft			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for SAP R/3			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for SEPA			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for Siebel			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Pack for SWIFT			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Packs for EDI			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Packs for Healthcare			Unknown	link			cisagov	2021-12-15
IBM	Sterling Transformation Extender Trading Manager			Unknown	link			cisagov	2021-12-15
IBM	Storage TS1160			Unknown	link			cisagov	2021-12-15
IBM	Storage TS2280			Unknown	link			cisagov	2021-12-15
IBM	Storage TS2900 Library			Unknown	link			cisagov	2021-12-15
IBM	Storage TS3100-TS3200 Library			Unknown	link			cisagov	2021-12-15
IBM	Storage TS4500 Library			Unknown	link			cisagov	2021-12-15
IBM	Storage Virtualization Engine TS7700			Unknown	link			cisagov	2021-12-15
IBM	Tape System Library Manager			Unknown	link			cisagov	2021-12-15
IBM	TDMF for zOS			Unknown	link			cisagov	2021-12-15
IBM	Total Storage Service Console (TSSC) / TS4500 IMC			Unknown	link			cisagov	2021-12-15
IBM	Transit Gateway			Unknown	link			cisagov	2021-12-15
IBM	Tririga Anywhere			Unknown	link			cisagov	2021-12-15
IBM	TS4300			Unknown	link			cisagov	2021-12-15
IBM	Urbancode Deploy			Unknown	link			cisagov	2021-12-15
IBM	Virtual Private Cloud			Unknown	link			cisagov	2021-12-15
IBM	Virtual Server for Classic			Unknown	link			cisagov	2021-12-15
IBM	Virtualization Management Interface			Unknown	link			cisagov	2021-12-15
IBM	VMware Solutions			Unknown	link			cisagov	2021-12-15
IBM	VMware vCenter Server			Unknown	link			cisagov	2021-12-15
IBM	VMware vSphere			Unknown	link			cisagov	2021-12-15
IBM	VPN for VPC			Unknown	link			cisagov	2021-12-15
IBM	vRealize Operations and Log Insight			Unknown	link			cisagov	2021-12-15
IBM	Workload Automation			Unknown	link			cisagov	2021-12-15
ICONICS	All			Unknown	link			cisagov	2021-12-21
IFS				Unknown	link			cisagov	2022-01-12
IGEL				Unknown	link			cisagov	2022-01-12
Ignite Realtime				Unknown	link			cisagov	2022-01-12
iGrafx				Unknown	link			cisagov	2022-01-12
Illuminated Cloud				Unknown	link			cisagov	2022-01-12
Illumio	C-VEN			Unknown	link			cisagov	2021-12-16
Illumio	CLI			Unknown	link			cisagov	2021-12-16
Illumio	CloudSecure			Unknown	link			cisagov	2021-12-16
Illumio	Core on-premise PCE			Unknown	link			cisagov	2021-12-16
Illumio	Core SaaS PCE			Unknown	link			cisagov	2021-12-16
Illumio	Edge SaaS PCE			Unknown	link			cisagov	2021-12-16
Illumio	Edge-CrowdStrike			Unknown	link			cisagov	2021-12-16
Illumio	Flowlink			Unknown	link			cisagov	2021-12-16
Illumio	Kubelink			Unknown	link			cisagov	2021-12-16
Illumio	NEN			Unknown	link			cisagov	2021-12-16
Illumio	QRadar App			Unknown	link			cisagov	2021-12-16
Illumio	Splunk App			Unknown	link			cisagov	2021-12-16
Illumio	VEN			Unknown	link			cisagov	2021-12-16
IManage				Unknown	link			cisagov	2022-01-12
Imperva				Unknown	link			cisagov	2022-01-12
Inductive Automation	Ignition			Not Affected	link	Older versions of Ignition (7.8 and older) did use the Log4j library, but they used an older version (1.2) that was not affected by this vulnerability.		cisagov	2022-01-19
IndustrialDefender				Unknown	link			cisagov	2022-01-12
infinidat				Unknown	link			cisagov	2022-01-12
InfluxData				Unknown	link			cisagov	2022-01-12
Infoblox				Unknown	link			cisagov	2022-01-12
Informatica				Unknown	link			cisagov	2022-01-12
Instana				Unknown	link			cisagov	2022-01-12
Instructure				Unknown	link			cisagov	2022-01-12
Intel	Audio Development Kit			Unknown	link			cisagov	2021-12-16
Intel	Computer Vision Annotation Tool maintained by Intel			Unknown	link			cisagov	2021-12-16
Intel	Datacenter Manager			Unknown	link			cisagov	2021-12-16
Intel	Genomics Kernel Library			Unknown	link			cisagov	2021-12-16
Intel	oneAPI sample browser plugin for Eclipse			Unknown	link			cisagov	2021-12-16
Intel	Secure Device Onboard			Unknown	link			cisagov	2021-12-16
Intel	Sensor Solution Firmware Development Kit			Unknown	link			cisagov	2021-12-16
Intel	System Debugger			Unknown	link			cisagov	2021-12-16
Intel	System Studio			Unknown	link			cisagov	2021-12-16
Internet Systems Consortium(ISC)	BIND 9			Not Affected	link	no JAVA Code		cisagov	2021-12-17
Internet Systems Consortium(ISC)	ISC DHCP, aka dhcpd			Not Affected	link	no JAVA Code		cisagov	2021-12-17
Internet Systems Consortium(ISC)	Kea DHCP			Not Affected	link	no JAVA Code		cisagov	2021-12-17
InterSystems				Unknown	link			cisagov	2022-01-12
Intland	codebeamer	<= 20.11-SP11, <= 21.09-SP3		Affected	link	A fix has been released for 20.11 and 21.09, but not yet for 21.04		cisagov	2022-01-12
IPRO	Netgovern			Unknown				cisagov	2022-01-12
iRedMail				Unknown	link			cisagov	2022-01-12
Ironnet				Unknown	link			cisagov	2022-01-12
ISLONLINE				Unknown	link			cisagov	2022-01-12
Ivanti	Application Control for Linux			Not Affected	link			cisagov	2022-01-18
Ivanti	Application Control for Windows			Not Affected	link			cisagov	2022-01-18
Ivanti	Automation			Not Affected	link			cisagov	2022-01-18
Ivanti	Avalanche	6.2.2, 6.3.0 to 6.3.3		Affected	link			cisagov	2022-01-18
Ivanti	Avalanche Remote Control			Not Affected	link			cisagov	2022-01-18
Ivanti	CETerm (Naurtech)			Not Affected	link			cisagov	2022-01-18
Ivanti	Cherwell Asset Management (CAM)			Not Affected	link			cisagov	2022-01-18
Ivanti	Cherwell Service Management (CSM)			Not Affected	link			cisagov	2022-01-18
Ivanti	Connect Pro			Not Affected	link			cisagov	2022-01-18
Ivanti	ConnectPro (Termproxy)			Not Affected	link			cisagov	2022-01-18
Ivanti	Credential mgr (PivD Manager)			Not Affected	link			cisagov	2022-01-18
Ivanti	Discovery Classic			Not Affected	link			cisagov	2022-01-18
Ivanti	DSM			Not Affected	link			cisagov	2022-01-18
Ivanti	Environment Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	GoldMine			Not Affected	link			cisagov	2022-01-18
Ivanti	HEAT Classic			Not Affected	link			cisagov	2022-01-18
Ivanti	IIRIS (Neurons for IIOT)			Not Affected	link			cisagov	2022-01-18
Ivanti	Incapptic Connect			Not Affected	link			cisagov	2022-01-18
Ivanti	Insight			Not Affected	link			cisagov	2022-01-18
Ivanti	ITSM 6/7			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Asset Lifecycle Management			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Device Application Control			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Endpoint Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Endpoint Security			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Environment Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti EPM - Cloud Service Appliance			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti File Director	2019.1., 2020.1., 2020.3., 2021.1., 4.4.*	2021.3 HF2, 2021.1 HF1, 2020.3 HF2	Fixed	link			cisagov	2022-01-18
Ivanti	Ivanti Identity Director			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti License Optimizer (ILO)			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Management Center			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Neurons Platform			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Performance Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Security Controls (Patch ISec)			Not Affected	link	See More INFO for Ivanti Security Controls (Patch ISec) in the Advisory Page		cisagov	2022-01-18
Ivanti	Ivanti Service Desk			Not Affected	link	Not Affected. Java is no longer required since version 2018.3U3 Customers on older versions can uninstall JRE on their ISD Servers for mitigation. This will disable indexing of Attachments and Documents for full-text search.		cisagov	2022-01-18
Ivanti	Ivanti Service Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Service Manager for Neurons (Cloud)			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Voice			Not Affected	link			cisagov	2022-01-18
Ivanti	Ivanti Workspace Control			Not Affected	link			cisagov	2022-01-18
Ivanti	MI Appconnect			Not Affected	link			cisagov	2022-01-18
Ivanti	MI Email+			Not Affected	link			cisagov	2022-01-18
Ivanti	MI Go Client			Not Affected	link			cisagov	2022-01-18
Ivanti	MI MobileAtWork			Not Affected	link			cisagov	2022-01-18
Ivanti	MI Security Productivity Apps			Not Affected	link			cisagov	2022-01-18
Ivanti	Mi Tunnel App			Not Affected	link			cisagov	2022-01-18
Ivanti	MobileIron Access ZSO	All		Affected	link	Mitigated. No Impact		cisagov	2022-01-18
Ivanti	MobileIron BYOD Portal			Not Affected	link			cisagov	2022-01-18
Ivanti	MobileIron Cloud			Not Affected	link			cisagov	2022-01-18
Ivanti	MobileIron Cloud Connector			Not Affected	link			cisagov	2022-01-18
Ivanti	MobileIron Core	All		Affected	link	See Advisory details for mitigation instructions for MobileIron Core.		cisagov	2022-01-18
Ivanti	MobileIron Core Connector	All		Affected	link	See Advisory details for mitigation instructions for MobileIron Core Connector.		cisagov	2022-01-18
Ivanti	MobileIron Sentry (Core/Cloud)	9.13, 9.14		Affected	link	See Advisory details for mitigation instructions for MobileIron Sentry.		cisagov	2022-01-18
Ivanti	Patch MEM (Microsoft Endpoint Manager)			Not Affected	link			cisagov	2022-01-18
Ivanti	Patch OEM APIs			Not Affected	link			cisagov	2022-01-18
Ivanti	Performance Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Connect Secure			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Desktop Client			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Mobile Client			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse One			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Policy Secure			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Services Director			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Virtual Traffic Manager			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse Web Application Firewall			Not Affected	link			cisagov	2022-01-18
Ivanti	Pulse ZTA			Not Affected	link			cisagov	2022-01-18
Ivanti	Risksense Threat and Vulnerability Management			Not Affected	link			cisagov	2022-01-18
Ivanti	SpeakEasy (add-on to Velocity)			Not Affected	link			cisagov	2022-01-18
Ivanti	SpeakEasy (WinCE)			Not Affected	link			cisagov	2022-01-18
Ivanti	Terminal Emulation and Industrial Browser			Not Affected	link			cisagov	2022-01-18
Ivanti	Velocity			Not Affected	link			cisagov	2022-01-18
Ivanti	VelocityCE			Not Affected	link			cisagov	2022-01-18
Ivanti	Virtual Desktop Extender			Not Affected	link			cisagov	2022-01-18
Ivanti	Wavelink License Server			Not Affected	link			cisagov	2022-01-18
Ivanti	Xtraction			Not Affected	link			cisagov	2022-01-18
Jamasoftware				Unknown	link			cisagov	2022-01-12
Jamf	Jamf Pro	10.31.0 – 10.34.0		Affected	link			cisagov	2022-01-12
Janitza	GridVis			Not Affected	link			cisagov	2022-01-05
Jaspersoft				Unknown	link			cisagov	2022-01-12
Jedox				Unknown	link			cisagov	2022-01-12
Jenkins	CI/CD Core			Unknown				cisagov	2022-01-12
Jenkins	Plugins			Unknown	link	Instructions to test your installations in announcement		cisagov	2021-12-16
JetBrains	All .NET tools (ReSharper, Rider, ReSharper C++, dotTrace, dotMemory, dotCover, dotPeek)			Not Affected	link			cisagov	2022-01-12
Jetbrains	Code With Me		Unknown	Fixed	link			cisagov	2022-01-12
JetBrains	Datalore			Not Affected	link			cisagov	2022-01-12
JetBrains	Floating license server		30211	Fixed	link			cisagov	2022-01-12
JetBrains	Gateway			Not Affected	link			cisagov	2022-01-12
JetBrains	Hub		2021.1.14080	Fixed	link			cisagov	2022-01-12
JetBrains	IntelliJ platform based IDEs (AppCode, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA Ultimate/Community/Edu, PhpStorm, PyCharm Professional/Community/Edu, Rider, RubyMine, WebStorm)			Not Affected	link			cisagov	2022-01-12
JetBrains	Kotlin			Not Affected	link			cisagov	2022-01-12
JetBrains	Ktor			Not Affected	link			cisagov	2022-01-12
JetBrains	MPS			Not Affected	link			cisagov	2022-01-12
JetBrains	Space			Not Affected	link			cisagov	2022-01-12
JetBrains	TeamCity			Not Affected	link			cisagov	2022-01-12
JetBrains	ToolBox			Not Affected	link			cisagov	2022-01-12
JetBrains	UpSource		2020.1.1952	Fixed	link			cisagov	2022-01-12
JetBrains	YouTrack InCloud		Unknown	Fixed	link			cisagov	2022-01-12
JetBrains	YouTrack Standalone		2021.4.35970	Fixed	link			cisagov	2022-01-12
JFROG				Unknown	link			cisagov	2022-01-12
Jitsi				Unknown	link			cisagov	2022-01-12
Jitterbit				Unknown	link			cisagov	2022-01-12
Johnson Controls	BCPro			Not Affected	link			cisagov	2021-12-21
Johnson Controls	CEM AC2000			Not Affected	link			cisagov	2021-12-21
Johnson Controls	CEM Hardware Products			Not Affected	link			cisagov	2021-12-21
Johnson Controls	CloudVue Gateway			Not Affected	link			cisagov	2021-12-21
Johnson Controls	CloudVue Web			Not Affected	link			cisagov	2021-12-21
Johnson Controls	C•CURE‐9000			Not Affected	link			cisagov	2021-12-21
Johnson Controls	C•CURE‐9000			Not Affected	link			cisagov	2021-12-21
Johnson Controls	C•CURE‐9000			Not Affected	link			cisagov	2021-12-21
Johnson Controls	C•CURE‐9000			Not Affected	link			cisagov	2021-12-21
Johnson Controls	DLS			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Entrapass			Not Affected	link			cisagov	2021-12-21
Johnson Controls	exacqVision Client			Not Affected	link			cisagov	2021-12-21
Johnson Controls	exacqVision Server			Not Affected	link			cisagov	2021-12-21
Johnson Controls	exacqVision WebService			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Facility Explorer			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Illustra Cameras			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Illustra Insight			Not Affected	link			cisagov	2021-12-21
Johnson Controls	iSTAR			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Metasys Products and Tools			Not Affected	link			cisagov	2021-12-21
Johnson Controls	PowerSeries NEO			Not Affected	link			cisagov	2021-12-21
Johnson Controls	PowerSeries Pro			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Qolsys IQ Panels			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Sur‐Gard Receivers			Not Affected	link			cisagov	2021-12-21
Johnson Controls	Tyco AI			Not Affected	link			cisagov	2021-12-21
Johnson Controls	victor			Not Affected	link			cisagov	2021-12-21
Johnson Controls	victor/ C•CURE‐9000 Unified			Not Affected	link			cisagov	2021-12-21
Johnson Controls	victor/ C•CURE‐9000 Unified			Not Affected	link			cisagov	2021-12-21
Johnson Controls	VideoEdge			Not Affected	link			cisagov	2021-12-21
Journyx				Unknown	link			cisagov	2022-01-12
jPOS	(ISO-8583) bridge			Not Affected	link			cisagov	2022-01-12
Jump Desktop				Unknown	link			cisagov	2022-01-12
Juniper Networks				Unknown	link			cisagov	2022-01-12
Justice Systems				Unknown	link			cisagov	2022-01-12
K15t	All			Unknown	link			cisagov	2022-01-12
K6	All			Unknown	link			cisagov	2022-01-12
Kaltura	Blackboard Learn SaaS in the classic Learn experience		v3900.28.x	Fixed	link			cisagov	2021-12-23
Kaltura	Blackboard Learn Self- and Managed-Hosting		v3900.26.x	Fixed	link			cisagov	2021-12-23
Karakun	All			Unknown	link			cisagov	2022-01-12
Kaseya	AuthAnvil			Not Affected	link			cisagov	2021-12-15
Kaseya	BMS			Not Affected	link			cisagov	2021-12-15
Kaseya	ID Agent DarkWeb ID and BullPhish ID			Not Affected	link			cisagov	2021-12-15
Kaseya	IT Glue			Not Affected	link			cisagov	2021-12-15
Kaseya	MyGlue			Not Affected	link			cisagov	2021-12-15
Kaseya	Network Glue			Not Affected	link			cisagov	2021-12-15
Kaseya	Passly			Not Affected	link			cisagov	2021-12-15
Kaseya	RocketCyber			Not Affected	link			cisagov	2021-12-15
Kaseya	Spannign Salesforce Backup			Not Affected	link			cisagov	2021-12-15
Kaseya	Spanning O365 Backup			Not Affected	link			cisagov	2021-12-15
Kaseya	Unitrends			Not Affected	link			cisagov	2021-12-15
Kaseya	Vorex			Not Affected	link			cisagov	2021-12-15
Kaseya	VSA SaaS and VSA On-Premises			Not Affected	link			cisagov	2021-12-15
KeePass	All			Not Affected	link			cisagov	2022-01-12
Keeper	All			Fixed	link			cisagov	2022-01-12
Kemp	All			Unknown	link		Additional Link	cisagov	2022-01-12
Keycloak	All			Not Affected	link			cisagov	2022-01-12
Kofax	Capture			Not Affected	link			cisagov	2022-01-12
Kofax	Communication Manager		5.3 - 5.5	Fixed	link			cisagov	2022-01-12
Kofax	Robot File System (RFS)		>=10.7	Fixed	link			cisagov	2022-01-12
Kofax	Robotic Process Automation (RPA)		11.1, 11.2	Fixed	link			cisagov	2022-01-12
Konica Minolta	All			Unknown	link			cisagov	2022-01-12
Kronos UKG	All			Unknown	link			cisagov	2022-01-12
Kyberna	All			Unknown	link			cisagov	2022-01-12
L-Soft				Unknown	link			cisagov	2022-01-12
L3Harris Geospatial				Unknown	link			cisagov	2022-01-12
Lancom Systems				Unknown	link			cisagov	2022-01-12
Lansweeper				Unknown	link			cisagov	2022-01-12
Laserfiche				Unknown	link			cisagov	2022-01-12
LastPass				Unknown	link			cisagov	2022-01-12
LaunchDarkly				Unknown	link			cisagov	2022-01-12
Leanix				Unknown	link			cisagov	2022-01-12
Leica BIOSYSTEMS	Aperio AT2			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio AT2 DX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio CS2			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio eSlide Manager			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio GT 450			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio GT 450 DX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio ImageScope			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio ImageScope DX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio LV1			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio SAM DX Server For GT 450 DX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio Scanner Administration Manager (SAM) Server for GT 450			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio VERSA			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Aperio WebViewer DX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	BOND Controller			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	BOND RX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	BOND RXm			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	BOND-ADVANCE			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	BOND-III			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	BOND-MAX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	CEREBRO			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	CytoVision			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	HistoCore PEARL			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	HistoCore PEGASUS			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	HistoCore SPECTRA CV			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	HistoCore SPECTRA ST			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	HistoCore SPIRIT ST			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	HistoCore SPRING ST			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Leica ASP300S			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Leica CV5030			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Leica ST4020			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Leica ST5010			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Leica ST5020			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	Leica TP1020			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	LIS Connect			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	PathDX			Unknown	link			cisagov	2021-12-21
Leica BIOSYSTEMS	ThermoBrite Elite			Unknown	link			cisagov	2021-12-21
Lenovo	BIOS/UEFI			Unknown	link			cisagov	2021-12-14
Lenovo	Chassis Management Module 2 (CMM)			Unknown	link			cisagov	2021-12-14
Lenovo	Commercial Vantage			Unknown	link			cisagov	2021-12-14
Lenovo	Confluent			Unknown	link			cisagov	2021-12-14
Lenovo	DSS-G			Unknown	link			cisagov	2021-12-14
Lenovo	Embedded System Management Java-based KVM clients			Unknown	link			cisagov	2021-12-14
Lenovo	Fan Power Controller (FPC)			Unknown	link			cisagov	2021-12-14
Lenovo	Fan Power Controller2 (FPC2)			Unknown	link			cisagov	2021-12-14
Lenovo	Integrated Management Module II (IMM2)			Unknown	link			cisagov	2021-12-14
Lenovo	NetApp ONTAP Tools for VMware vSphere			Unknown	link	See NetApp advisory.		cisagov	2021-12-14
Lenovo	Network Switches running: Lenovo CNOS, Lenovo ENOS, IBM ENOS, or Brocade FOS			Unknown	link			cisagov	2021-12-14
Lenovo	Storage Management utilities			Unknown	link			cisagov	2021-12-14
Lenovo	System Management Module (SMM)			Unknown	link			cisagov	2021-12-14
Lenovo	System Management Module 2 (SMM2)			Unknown	link			cisagov	2021-12-14
Lenovo	System Update			Unknown	link			cisagov	2021-12-14
Lenovo	Thin Installer			Unknown	link			cisagov	2021-12-14
Lenovo	ThinkAgile HX			Unknown	link	Nutanix and VMware components only; hardware not affected. See Nutanix and VMWare advisories.		cisagov	2021-12-14
Lenovo	ThinkAgile VX			Unknown	link	VMware components only; hardware not affected. See VMWare advisory.		cisagov	2021-12-14
Lenovo	ThinkSystem 2x1x16 Digital KVM Switch - Type 1754D1T			Unknown	link			cisagov	2021-12-14
Lenovo	ThinkSystem DE Series Storage			Unknown	link	See also NetApp advisory.		cisagov	2021-12-14
Lenovo	ThinkSystem DM Series Storage			Unknown	link	See also NetApp advisory.		cisagov	2021-12-14
Lenovo	ThinkSystem DS Series Storage			Unknown	link			cisagov	2021-12-14
Lenovo	ThinkSystem Manager (TSM)			Unknown	link			cisagov	2021-12-14
Lenovo	Update Retriever			Unknown	link			cisagov	2021-12-14
Lenovo	Vantage			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Administrator (LXCA)			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Controller (XCC)			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Energy Manager (LXEM)			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Essentials (LXCE)			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Integrator (LXCI) for Microsoft Azure Log Analytics			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Integrator (LXCI) for Microsoft System Center			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Integrator (LXCI) for Nagios			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Integrator (LXCI) for ServiceNow			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Integrator (LXCI) for VMware vCenter			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Integrator (LXCI) for Windows Admin Center			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Mobile (LXCM)			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Orchestrator (LXCO)			Unknown	link			cisagov	2021-12-14
Lenovo	XClarity Provisioning Manager (LXPM)			Unknown	link			cisagov	2021-12-14
LeoStream				Unknown	link			cisagov	2022-01-12
Let's Encrypt				Unknown	link			cisagov	2022-01-12
LibreNMS				Unknown	link			cisagov	2022-01-12
LifeRay				Unknown	link			cisagov	2022-01-12
LifeSize				Unknown	link			cisagov	2022-01-12
Lightbend				Unknown	link			cisagov	2022-01-12
Lime CRM				Unknown	link			cisagov	2022-01-12
LIONGARD				Unknown	link			cisagov	2022-01-12
LiquidFiles				Unknown	link			cisagov	2022-01-12
LiveAction				Unknown	link			cisagov	2022-01-12
Loftware				Unknown	link			cisagov	2022-01-12
LOGalyze	SIEM & log analyzer tool	v4.x		Affected	link	local-log4j-vuln-scanner result: indicator for vulnerable component found in /logalyze/lib/log4j-1.2.17.jar (org/apache/log4j/net/SocketNode.class): log4j 1.2.17	Forks (github.com)	cisagov	2021-12-17
LogiAnalytics				Unknown	link			cisagov	2022-01-12
LogicMonitor	LogicMonitor Platform			Unknown	link			cisagov	2022-01-12
LogMeIn				Unknown	link			cisagov	2022-01-12
LogRhythm				Unknown	link			cisagov	2022-01-12
Looker	Looker	21.0, 21.6, 21.12, 21.16, 21.18, 21.20		Affected	link			cisagov	2022-01-12
LucaNet				Unknown	link			cisagov	2022-01-12
Lucee				Unknown	link			cisagov	2022-01-12
Lyrasis	Fedora Repository			Not Affected	link	Fedora Repository is unaffiliated with Fedora Linux. Uses logback and explicitly excludes log4j.		cisagov	2021-12-14
MailStore				Unknown	link			cisagov	2022-01-12
Maltego				Unknown	link			cisagov	2022-01-12
ManageEngine	AD SelfService Plus			Not Affected				cisagov	2021-12-27
ManageEngine	Servicedesk Plus	11305 and below		Affected	link			cisagov	2021-12-15
ManageEngine Zoho				Unknown	link			cisagov	2022-01-12
ManageEngine Zoho	ADAudit Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	ADManager Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	Analytics Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	Cloud Security Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	DataSecurity Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	EventLog Analyzer			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	Exchange Reporter Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	Log360			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	Log360 UEBA			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	M365 Manager Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	M365 Security Plus			Unknown	link			cisagov	2021-12-16
ManageEngine Zoho	RecoveryManager Plus			Unknown	link			cisagov	2021-12-16
MariaDB				Unknown	link			cisagov	2022-01-12
MathWorks	All MathWorks general release desktop or server products			Not Affected	link			cisagov	2022-01-18
MathWorks	MATLAB			Not Affected	link			cisagov	2022-01-18
Matillion	Matillion ETL		1.59.10+	Fixed	link			cisagov	2022-11-01
Matomo				Unknown	link			cisagov	2022-01-12
Mattermost FocalBoard				Unknown	link			cisagov	2022-01-12
McAfee	Data Exchange Layer (DXL) Client			Unknown				cisagov	2021-12-20
McAfee	Data Loss Prevention (DLP) Discover			Unknown				cisagov	2021-12-20
McAfee	Data Loss Prevention (DLP) Endpoint for Mac			Unknown				cisagov	2021-12-20
McAfee	Data Loss Prevention (DLP) Endpoint for Windows			Unknown				cisagov	2021-12-20
McAfee	Data Loss Prevention (DLP) Monitor			Unknown				cisagov	2021-12-20
McAfee	Data Loss Prevention (DLP) Prevent			Unknown				cisagov	2021-12-20
McAfee	Endpoint Security (ENS) for Linux			Unknown				cisagov	2021-12-20
McAfee	Endpoint Security (ENS) for Mac			Unknown				cisagov	2021-12-20
McAfee	Endpoint Security (ENS) for Windows			Unknown				cisagov	2021-12-20
McAfee	Enterprise Security Manager (ESM)		11.5.3	Fixed	link			cisagov	2021-12-20
McAfee	ePolicy Orchestrator Agent Handlers (ePO-AH)			Unknown				cisagov	2021-12-20
McAfee	ePolicy Orchestrator Application Server (ePO)		5.10 CU11	Fixed	link			cisagov	2021-12-20
McAfee	Host Intrusion Prevention (Host IPS)			Unknown				cisagov	2021-12-20
McAfee	Management of Native Encryption (MNE)			Unknown				cisagov	2021-12-20
McAfee	McAfee Active Response (MAR)			Unknown				cisagov	2021-12-20
McAfee	McAfee Agent (MA)			Unknown				cisagov	2021-12-20
McAfee	McAfee Application and Change Control (MACC) for Linux			Unknown				cisagov	2021-12-20
McAfee	McAfee Application and Change Control (MACC) for Windows			Unknown				cisagov	2021-12-20
McAfee	McAfee Client Proxy (MCP) for Mac			Unknown				cisagov	2021-12-20
McAfee	McAfee Client Proxy (MCP) for Windows			Unknown				cisagov	2021-12-20
McAfee	McAfee Drive Encryption (MDE)			Unknown				cisagov	2021-12-20
McAfee	McAfee Security for Microsoft Exchange (MSME)			Unknown				cisagov	2021-12-20
McAfee	McAfee Security for Microsoft Exchange (MSME)			Unknown				cisagov	2021-12-20
McAfee	McAfee Security for Microsoft SharePoint (MSMS)			Unknown				cisagov	2021-12-20
McAfee	Network Security Manager (NSM)			Unknown				cisagov	2021-12-20
McAfee	Network Security Platform (NSP)			Unknown				cisagov	2021-12-20
McAfee	Policy Auditor			Unknown				cisagov	2021-12-20
McAfee	Threat Intelligence Exchange (TIE)			Unknown	link	Latest status in linked Security Bulletin		cisagov	2021-12-20
McAfee	Web Gateway (MWG)			Unknown	link			cisagov	2021-12-20
Medtronic				Unknown	link			cisagov	2021-12-21
MEINBERG				Unknown	link			cisagov	2022-01-12
MEINBERG	LANTIME and microSync			Unknown	link			cisagov	2022-01-05
Meltano	Meltano			Unknown	link	Project is written in Python		cisagov	2022-01-12
Memurai				Unknown	link			cisagov	2022-01-12
Micro Focus	Data Protector		10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.90, 10.91, 11.00	Fixed	link		https://portal.microfocus.com/s/article/KM000003050	cisagov	2021-12-13
Microsoft	Azure API Gateway			Unknown	link			cisagov	2022-01-12
Microsoft	Azure Application Gateway			Unknown	link			cisagov	2022-01-12
Microsoft	Azure Data lake store java	< 2.3.10		Affected	link			cisagov	2022-01-12
Microsoft	Azure Data lake store java	< 2.3.10		Affected	link			cisagov	2022-01-12
Microsoft	Azure DevOps			Unknown	link			cisagov	2022-01-12
Microsoft	Azure DevOps Server	2019.0 - 2020.1		Affected	link			cisagov	2022-01-12
Microsoft	Azure Traffic Manager			Unknown	link			cisagov	2022-01-12
Microsoft	Team Foundation Server	2018.2+		Affected	link			cisagov	2022-01-12
Microstrategy				Unknown	link			cisagov	2022-01-12
Midori Global				Unknown	link			cisagov	2022-01-12
Mikrotik				Unknown	link			cisagov	2022-01-12
Milestone sys				Unknown	link			cisagov	2022-01-12
Mimecast				Unknown	link			cisagov	2022-01-12
Minecraft				Unknown	link			cisagov	2022-01-12
Mirantis				Unknown	link			cisagov	2022-01-12
Miro				Unknown	link			cisagov	2022-01-12
Mitel				Unknown	link			cisagov	2022-01-12
MMM Group	Control software of all MMM series			Unknown	link			cisagov	2022-01-05
MMM Group	RUMED360 Cycles, RUMED360 Cycles View, RUMED360 Sicon, RUMED360 ISA-Server			Unknown	link			cisagov	2022-01-05
MongoDB	All other components of MongoDB Atlas (including Atlas Database, Data Lake, Charts)			Unknown	link			cisagov	2022-01-12
MongoDB	MongoDB Atlas Search			Unknown	link			cisagov	2022-01-12
MongoDB	MongoDB Community Edition (including Community Server, Cloud Manager, Community Kubernetes Operators)			Unknown	link			cisagov	2022-01-12
MongoDB	MongoDB Drivers			Unknown	link			cisagov	2022-01-12
MongoDB	MongoDB Enterprise Advanced (including Enterprise Server, Ops Manager, Enterprise Kubernetes Operators)			Unknown	link			cisagov	2022-01-12
MongoDB	MongoDB Realm (including Realm Database, Sync, Functions, APIs)			Unknown	link			cisagov	2022-01-12
MongoDB	MongoDB Tools (including Compass, Database Shell, VS Code Plugin, Atlas CLI, Database Connectors)			Unknown	link			cisagov	2022-01-12
Moodle				Unknown	link			cisagov	2022-01-12
MoogSoft				Unknown	link			cisagov	2022-01-12
Motorola Avigilon				Unknown	link			cisagov	2022-01-12
Moxa				Not Affected	link	Moxa is investigating to determine if any of our products are affected by this vulnerability. At the time of publication, none of Moxa's products are affected.		cisagov	2022-01-19
Mulesoft				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Mulesoft	Anypoint Studio	7.x		Affected	link	This advisory is available to account holders only and has not been reviewed by CISA.		cisagov	2021-12-15
Mulesoft	Cloudhub			Unknown	link	This advisory is available to account holders only and has not been reviewed by CISA.		cisagov	2021-12-15
Mulesoft	Mule Agent	6.x		Affected	link	This advisory is available to account holders only and has not been reviewed by CISA.		cisagov	2021-12-15
Mulesoft	Mule Runtime	3.x, 4.x		Affected	link	This advisory is available to account holders only and has not been reviewed by CISA.		cisagov	2021-12-15
N-able				Unknown	link			cisagov	2022-01-12
Nagios				Unknown	link			cisagov	2022-01-12
NAKIVO				Unknown	link			cisagov	2022-01-12
National Instruments	OptimalPlus	Vertica, Cloudera, Logstash		Affected	link	(Limited to deployments running Vertica, Cloudera, or Logstash) Contact Technical Support		cisagov	2022-01-05
Neo4j	Neo4j Graph Database	>4.2, <4..2.12		Affected				cisagov	2021-12-13
Netapp	Multiple NetApp products			Unknown	link			cisagov	2022-01-12
Netcup				Unknown	link			cisagov	2022-01-12
NetGate PFSense				Unknown	link			cisagov	2022-01-12
Netwrix				Unknown	link			cisagov	2022-01-12
New Relic	Containerized Private Minion (CPM)		3.0.57	Fixed	link	New Relic is in the process of revising guidance/documentation, however the fix version remains sufficient.	Security Bulletin NR21-04	cisagov	2021-12-18
New Relic	New Relic Java Agent	<7.4.3		Affected	link	Initially fixed in 7.4.2, but additional vulnerability found	New Relic tracking, covers CVE-2021-44228, CVE-2021-45046	cisagov	2021-12-20
NextCloud				Unknown	link			cisagov	2022-01-12
Nextflow	Nextflow			Not Affected	link			cisagov	2021-12-21
Nexus Group				Unknown	link			cisagov	2022-01-12
Nice Software (AWS) EnginFRAME				Unknown	link			cisagov	2022-01-12
NinjaRMM				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Nomachine				Unknown	link			cisagov	2022-01-12
NoviFlow				Unknown	link			cisagov	2022-01-12
Nulab	Backlog		N/A (SaaS)	Fixed	link			cisagov	2022-01-12
Nulab	Backlog Enterprise (On-premises)		< 1.11.7	Fixed	link			cisagov	2022-01-12
Nulab	Cacoo		N/A (SaaS)	Fixed	link			cisagov	2022-01-12
Nulab	Cacoo Enterprise (On-premises)		< 4.0.4	Fixed	link			cisagov	2022-01-12
Nulab	Typetalk		N/A (SaaS)	Fixed	link			cisagov	2022-01-12
Nutanix	AHV			Not Affected	link			cisagov	2021-12-20
Nutanix	AOS			Not Affected	link			cisagov	2021-12-20
Nutanix	AOS		STS (including Prism Element)	Fixed	link	Patched in 6.0.2.4, available on the Portal for download.		cisagov	2021-12-20
Nutanix	Beam			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	BeamGov			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Calm			Not Affected	link			cisagov	2021-12-20
Nutanix	Calm Tunnel VM			Not Affected	link			cisagov	2021-12-20
Nutanix	Collector			Not Affected	link			cisagov	2021-12-20
Nutanix	Collector Portal			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Data Lens			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Era			Not Affected	link			cisagov	2021-12-20
Nutanix	File Analytics	2.1.x, 2.2.x, 3.0+		Affected	link	Mitigated in version 3.0.1 which is available on the Portal for download. Mitigation is available here		cisagov	2021-12-20
Nutanix	Files			Not Affected	link			cisagov	2021-12-20
Nutanix	Flow			Not Affected	link			cisagov	2021-12-20
Nutanix	Flow Security Cental			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Foundation			Not Affected	link			cisagov	2021-12-20
Nutanix	Frame			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	FrameGov			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	FSCVM			Not Affected	link			cisagov	2021-12-20
Nutanix	Insights			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Karbon	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	Karbon Platform Service			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	LCM			Not Affected	link			cisagov	2021-12-20
Nutanix	Leap			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Mine	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	Move			Not Affected	link			cisagov	2021-12-20
Nutanix	MSP	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	NCC			Not Affected	link			cisagov	2021-12-20
Nutanix	NGT			Not Affected	link			cisagov	2021-12-20
Nutanix	Objects	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	Prism Central		All	Fixed	link	Patched in 2021-9.0.3, available on the Portal for download.		cisagov	2021-12-20
Nutanix	Sizer			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Volumes			Not Affected	link			cisagov	2021-12-20
Nutanix	Witness VM	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	X-Ray			Not Affected	link			cisagov	2021-12-20
Nvidia				Unknown	link			cisagov	2022-01-12
NXLog				Unknown	link			cisagov	2022-01-12
Objectif Lune				Unknown	link			cisagov	2022-01-12
OCLC				Unknown	link			cisagov	2022-01-12
Octopus				Unknown	link			cisagov	2022-01-12
Okta	Advanced Server Access			Unknown	link			cisagov	2021-12-12
Okta	Okta Access Gateway			Unknown	link			cisagov	2021-12-12
Okta	Okta AD Agent			Unknown	link			cisagov	2021-12-12
Okta	Okta Browser Plugin			Unknown	link			cisagov	2021-12-12
Okta	Okta IWA Web Agent			Unknown	link			cisagov	2021-12-12
Okta	Okta LDAP Agent			Unknown	link			cisagov	2021-12-12
Okta	Okta Mobile			Unknown	link			cisagov	2021-12-12
Okta	Okta On-Prem MFA Agent	< 1.4.6		Affected	link			cisagov	2021-12-12
Okta	Okta RADIUS Server Agent	< 2.17.0		Affected	link			cisagov	2021-12-12
Okta	Okta Verify			Unknown	link			cisagov	2021-12-12
Okta	Okta Workflows			Unknown	link			cisagov	2021-12-12
Onespan				Unknown	link			cisagov	2022-01-12
Opengear				Unknown	link			cisagov	2022-01-12
OpenMRS TALK				Unknown	link			cisagov	2022-01-12
OpenNMS				Unknown	link			cisagov	2022-01-12
OpenSearch				Unknown	link			cisagov	2022-01-12
OpenText				Unknown	link			cisagov	2021-12-23
Opto 22	GROOV-AR1, GROOV-AR1-BASE, GROOV-AR1-SNAP	< 4.3g	4.3g	Fixed	link	The Log4j vulnerability affects all products running groov View software		cisagov	2022-01-13
Opto 22	GROOV-AT1, GROOV-AT1-SNAP	< 4.3g	4.3g	Fixed	link	The Log4j vulnerability affects all products running groov View software		cisagov	2022-01-13
Opto 22	GROOV-SVR-WIN, GROOV-SVR-WIN-BASE, GROOV-SVR-WIN-SNAP	< 4.3g	4.3g	Fixed	link	The Log4j vulnerability affects all products running groov View software		cisagov	2022-01-13
Opto 22	GRV-EPIC-PR1, GRV-EPIC-PR2	< 3.3.2	3.3.2	Fixed	link	The Log4j vulnerability affects all products running groov View software		cisagov	2022-01-13
Oracle				Unknown	link	The support document is available to customers only and has not been reviewed by CISA		cisagov	2021-12-17
Oracle	Enterprise Manager	13.5, 13.4 & 13.3.2		Affected	link	Patch status and other security guidance is restricted to Oracle account/support members. The support document is available to customers only and has not been reviewed by CISA.		cisagov	2021-12-17
Oracle	Exadata	<21.3.4		Affected	link	Patch status and other security guidance is restricted to Oracle account/support members. The support document is available to customers only and has not been reviewed by CISA.		cisagov	2021-12-17
Orgavision				Unknown	link			cisagov	2022-01-12
Osirium	PAM			Unknown	link			cisagov	2022-01-12
Osirium	PEM			Unknown	link			cisagov	2022-01-12
Osirium	PPA			Unknown	link			cisagov	2022-01-12
OTRS				Unknown	link			cisagov	2022-01-12
OVHCloud				Unknown	link			cisagov	2022-01-12
OwnCloud				Unknown	link			cisagov	2022-01-12
OxygenXML	Author			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Developer			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Editor			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Oxygen Content Fusion	2.0, 3.0, 4.1		Affected		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Oxygen Feedback Enterprise	1.4.4 & older		Affected		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Oxygen License Server	v22.1 to v24.0		Affected		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Oxygen PDF Chemistry	v22.1, 23.0, 23.1, 24.0		Affected		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Oxygen SDK			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Plugins (see advisory link)			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Publishing Engine			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	Web Author			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
OxygenXML	WebHelp			Unknown		https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html		cisagov	2021-12-17
PagerDuty	PagerDuty SaaS			Unknown	link	We currently see no evidence of compromises on our platform. Our teams continue to monitor for new developments and for impacts on sub-processors and dependent systems. PagerDuty SaaS customers do not need to take any additional action for their PagerDuty SaaS environment		cisagov	2021-12-21
Palantir	Palantir AI Inference Platform (AIP)		All	Fixed	link	Fully remediated as of 1.97.0. Disconnected customer instances may require manual updates.		cisagov	2021-12-19
Palantir	Palantir Apollo			Not Affected	link	No impact, and updates have been deployed for full remediation.		cisagov	2021-12-19
Palantir	Palantir Foundry		All	Fixed	link	No impact to Palantir-hosted or Apollo-connected instances, and updates have been deployed for full remediation. Disconnected customer instances may require manual updates.		cisagov	2021-12-19
Palantir	Palantir Gotham		All	Fixed	link	No impact to Palantir-hosted or Apollo-connected instances, and updates have been deployed for full remediation. Disconnected customer instances may require manual updates.		cisagov	2021-12-19
Palo-Alto Networks	Bridgecrew			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	CloudGenix			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Cortex Data Lake			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Cortex XDR Agent			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Cortex Xpanse			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Cortex XSOAR			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Expedition			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	GlobalProtect App			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	IoT Security			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Okyo Grade			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Palo-Alto Networks-OS for Firewall and Wildfire			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Palo-Alto Networks-OS for Panorama	9.0, 9.1, 10.0		Affected	link		Upgrade Panorama to PAN-OS 10.1 to remediate this issue. This advisory will be updated when hot fixes for the affected Panorama versions are available. PAN-OS for Panorama versions 8.1, 10.1 are not affected.	cisagov	2021-12-15
Palo-Alto Networks	Prisma Access			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Prisma Cloud			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	Prisma Cloud Compute			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	SaaS Security			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	User-ID Agent			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	WildFire Appliance			Unknown	link			cisagov	2022-01-12
Palo-Alto Networks	WildFire Cloud			Unknown	link			cisagov	2022-01-12
Panasonic	KX-HDV100			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-HDV130			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-HDV230			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-HDV330			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-HDV340			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-HDV430			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-HDV800			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-TGP500			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-TGP550			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-TGP600			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-TGP700			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UDS124			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UT113			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UT123			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UT133			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UT136			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UT248			Not Affected	link			cisagov	2022-01-20
Panasonic	KX-UT670			Not Affected	link			cisagov	2022-01-20
Panopto				Unknown	link			cisagov	2022-01-12
PaperCut	PaperCut MF	21.0 and later		Affected	link	Versions 21.0 and later are impacted. Versions 20 and earlier are NOT impacted by this. Workaround manual steps available in reference. Upgrade to PaperCut NG/MF version 21.2.3 Now Available to resolve.		cisagov	2021-12-16
PaperCut	PaperCut NG	21.0 and later		Affected	link	Versions 21.0 and later are impacted. Versions 20 and earlier are NOT impacted by this. Workaround manual steps available in reference. Upgrade to PaperCut NG/MF version 21.2.3 Now Available to resolve.		cisagov	2021-12-16
Parallels				Unknown	link			cisagov	2022-01-12
Parse.ly				Unknown	link			cisagov	2022-01-12
PBXMonitor	RMM for 3CX PBX			Unknown	link	Mirror Servers were also checked to ensure Log4J was not installed or being used by any of our systems.		cisagov	2021-12-22
Pega				Unknown	link			cisagov	2022-01-12
Pentaho				Unknown	link			cisagov	2022-01-12
Pepperl+Fuchs				Unknown	link			cisagov	2021-12-21
Percona				Unknown	link			cisagov	2022-01-12
Pexip				Unknown	link			cisagov	2022-01-12
Phenix Id				Unknown	link			cisagov	2022-01-12
Philips	Multiple products			Unknown	link			cisagov	2022-01-12
PHOENIX CONTACT	Cloud Services			Unknown	link	Partly affected. Remediations are being implemented.		cisagov	2021-12-22
PHOENIX CONTACT	Physical products containing firmware			Unknown	link			cisagov	2021-12-22
PHOENIX CONTACT	Software Products			Unknown	link			cisagov	2021-12-22
Ping Identity	PingAccess	4.0 <= version <= 6.3.2		Affected	link			cisagov	2021-12-15
Ping Identity	PingCentral			Unknown	link			cisagov	2021-12-15
Ping Identity	PingFederate	8.0 <= version <= 10.3.4		Affected	link			cisagov	2021-12-15
Ping Identity	PingFederate Java Integration Kit	< 2.7.2		Affected	link			cisagov	2021-12-15
Ping Identity	PingFederate OAuth Playground	< 4.3.1		Affected	link			cisagov	2021-12-15
Ping Identity	PingIntelligence			Unknown	link			cisagov	2021-12-15
Pitney Bowes				Unknown	link			cisagov	2022-01-12
Planmeca				Unknown	link			cisagov	2022-01-12
Planon Software				Unknown	link	This advisory is available for customers only and has not been reviewed by CISA		cisagov	2022-01-12
Platform.SH				Unknown	link			cisagov	2022-01-12
Plesk				Unknown	link			cisagov	2022-01-12
Plex	Plex Industrial IoT			Unknown	link	The product has been updated to Log4j version 2.15. An additional patch is being developed to update to 2.16. No user interaction is required.		cisagov	2021-12-15
Polycom				Unknown	link			cisagov	2022-01-12
Portainer				Unknown	link			cisagov	2022-01-12
PortSwigger				Unknown	link			cisagov	2022-01-12
PostGreSQL				Unknown	link			cisagov	2022-01-12
Postman				Unknown	link			cisagov	2022-01-12
Power Admin LLC	PA File Sight			Not Affected				cisagov	2021-12-17
Power Admin LLC	PA Server Monitor			Not Affected				cisagov	2021-12-17
Power Admin LLC	PA Storage Monitor			Not Affected				cisagov	2021-12-17
Pretix				Unknown	link			cisagov	2022-01-12
PrimeKey				Unknown	link			cisagov	2022-01-12
Progress / IpSwitch				Unknown	link			cisagov	2022-01-12
ProofPoint				Unknown	link	This advisory is available for customers only and has not been reviewed by CISA		cisagov	2022-01-12
ProSeS				Unknown	link			cisagov	2022-01-12
Prosys				Unknown	link			cisagov	2022-01-12
Proxmox				Unknown	link			cisagov	2022-01-12
PRTG Paessler				Unknown	link			cisagov	2022-01-12
PTC	Axeda Platform	6.9.2		Affected	link			cisagov	2021-12-17
PTC	ThingsWorx Analytics	8.5, 9.0, 9.1, 9.2, All supported versions		Affected	link			cisagov	2021-12-17
PTC	ThingsWorx Platform	8.5, 9.0, 9.1, 9.2, All supported versions		Affected	link			cisagov	2021-12-17
PTV Group				Unknown	link			cisagov	2022-01-12
Pulse Secure	Ivanti Connect Secure (ICS)			Unknown	link			cisagov	2022-01-12
Pulse Secure	Ivanti Neurons for secure Access			Unknown	link			cisagov	2022-01-12
Pulse Secure	Ivanti Neurons for secure Access			Unknown	link			cisagov	2022-01-12
Pulse Secure	Ivanti Neurons for ZTA			Unknown	link			cisagov	2022-01-12
Pulse Secure	Ivanti Neurons for ZTA			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Connect Secure			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Desktop Client			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Mobile Client			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse One			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Policy Secure			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Secure Services Director			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Secure Virtual Traffic Manager			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse Secure Web Application Firewall			Unknown	link			cisagov	2022-01-12
Pulse Secure	Pulse ZTA			Unknown	link			cisagov	2022-01-12
Puppet				Unknown	link			cisagov	2022-01-12
Pure Storage				Unknown	link	This advisory is available for customers only and has not been reviewed by CISA		cisagov	2022-01-12
Pure Storage	Cloud Blockstore	CBS6.1.x, CBS6.2.x		Affected	link	Patch expected 12/27/2021		cisagov	2021-12-15
Pure Storage	Flash Array	5.3.x, 6.0.x, 6.1.x, 6.2.x		Affected	link	Patch expected 12/20/2021		cisagov	2021-12-15
Pure Storage	FlashBlade	3.1.x, 3.2.x, 3.3.x		Affected	link	Patch expected 12/24/2021		cisagov	2021-12-15
Pure Storage	PortWorx	2.8.0+		Affected	link			cisagov	2021-12-15
Pure Storage	Pure1		N/A	Fixed	link			cisagov	2021-12-15
Pyramid Analytics				Unknown	link			cisagov	2022-01-12
Qconference	FaceTalk			Fixed	link			cisagov	2021-12-16
QF-Test	All			Unknown	link			cisagov	2022-01-12
Qlik	AIS, including ARC			Not Affected	link			cisagov	2021-12-15
Qlik	Attunity Visibility			Not Affected	link			cisagov	2021-12-15
Qlik	AutoML			Not Affected	link			cisagov	2021-12-15
Qlik	Blendr			Not Affected	link			cisagov	2021-12-15
Qlik	C4DL		6.6	Fixed	link			cisagov	2021-12-15
Qlik	C4DW		6.6, 6.6.1, 7.0	Fixed	link			cisagov	2021-12-15
Qlik	Catalog		4.10.0, 4.10.1, 4.10.2, 4.11.0, 4.11.1, 4.12.0, 4.12.1	Fixed	link			cisagov	2021-12-15
Qlik	Compose		2021.2, 2021.5, 2021.8	Fixed	link			cisagov	2021-12-15
Qlik	Compose for Data Lakes			Not Affected	link			cisagov	2021-12-15
Qlik	Compose for Data Wharehouses			Not Affected	link			cisagov	2021-12-15
Qlik	GeoAnalytics Plus		5.26.5, 5.27.5 - 5.28.2, 5.29.4 - 5.30.1, 5.31.1, 5.31.2	Fixed	link			cisagov	2021-12-15
Qlik	GeoAnalytics Server		4.19.1 - 4.27.3, 4.23.4, 4.32.3	Fixed	link			cisagov	2021-12-15
Qlik	Nodegraph			Not Affected	link			cisagov	2021-12-15
Qlik	Nprinting			Not Affected	link			cisagov	2021-12-15
Qlik	ODBC Connector Package			Not Affected	link			cisagov	2021-12-15
Qlik	QEM		6.6, 7.0, 2021.5, 2021.11	Fixed	link			cisagov	2021-12-15
Qlik	Qlik Alerting			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Catalog			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Data Transfer			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Enterprise Manager		6.6, 7.0, 2021.5, 2021.11	Fixed	link			cisagov	2021-12-15
Qlik	Qlik Forts			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik RepliWeb and ARC			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Sense Business			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Sense Enterprise			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Sense Enterprise SaaS			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik View			Not Affected	link			cisagov	2021-12-15
Qlik	Qlik Web Connectors			Not Affected	link			cisagov	2021-12-15
Qlik	Replicate		6.6, 7.0, 2021.5, 2021.11	Fixed	link			cisagov	2021-12-15
Qlik	REST Connectors			Not Affected	link			cisagov	2021-12-15
Qlik	Salesforce and SAP Connectors			Not Affected	link	Connectos are not affected.		cisagov	2021-12-15
QMATIC	Appointment Booking		2.4+	Fixed	link	Update to v. 2.8.2 which contains log4j 2.16		cisagov	2021-12-21
QMATIC	Appointment Booking		Cloud/Managed Service	Fixed	link	log4j 2.16 applied 2021-12-15		cisagov	2021-12-21
QMATIC	Insights		Cloud	Fixed	link	log4j 2.16 applied 2021-12-16		cisagov	2021-12-21
QMATIC	Orchestra Central			Not Affected	link			cisagov	2021-12-21
QNAP	QES Operating System			Not Affected	link			cisagov	2022-01-12
QNAP	Qsirch			Not Affected	link			cisagov	2022-01-12
QNAP	QTS Operating System			Not Affected	link			cisagov	2022-01-12
QNAP	QuTS Hero Operating System			Not Affected	link			cisagov	2022-01-12
QOPPA	All			Unknown	link			cisagov	2022-01-12
QOS.ch	SLF4J Simple Logging Facade for Java			Unknown	link			cisagov	2022-01-12
QSC Q-SYS	All			Unknown	link			cisagov	2022-01-12
QT	All			Unknown	link			cisagov	2022-01-12
Quest	Foglight			Unknown	link			cisagov	2022-01-12
Quest	Foglight		6.0	Fixed	link			cisagov	2022-01-12
Quest	Quest KACE SMA			Not Affected	link			cisagov	2022-01-12
R	R			Not Affected	link			cisagov	2021-12-21
R2ediviewer				Unknown	link			cisagov	2022-01-12
Radware				Unknown	link			cisagov	2022-01-12
Rapid7	AlcidekArt, kAdvisor, and kAudit			Not Affected	link			cisagov	2021-12-15
Rapid7	AppSpider Enterprise			Not Affected	link			cisagov	2021-12-15
Rapid7	AppSpider Pro			Not Affected	link			cisagov	2021-12-15
Rapid7	Insight Agent			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightAppSec Scan Engine			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightAppSec Scan Engine			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightCloudSec/DivvyCloud			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightConnect Orchestrator			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightIDR Network Sensor			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightIDR/InsightOps Collector & Event Sources			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightOps DataHub	InsightOps DataHub <= 2.0		Affected	link	Upgrade DataHub to version 2.0.1 using the following instructions.		cisagov	2021-12-15
Rapid7	InsightOps non-Java logging libraries			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightOps r7insight_java logging library	<=3.0.8		Affected	link	Upgrade r7insight_java to 3.0.9		cisagov	2021-12-15
Rapid7	InsightVM Kubernetes Monitor			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightVM/Nexpose			Not Affected	link			cisagov	2021-12-15
Rapid7	InsightVM/Nexpose Console			Not Affected	link	Installations of the InsightVM/Nexpose have “log4j-over-slf4j-1.7.7.jar” packaged in them. This is a different library than log4j-core and is not vulnerable to Log4Shell.		cisagov	2021-12-15
Rapid7	InsightVM/Nexpose Engine			Not Affected	link	Installations of the InsightVM/Nexpose have “log4j-over-slf4j-1.7.7.jar” packaged in them. This is a different library than log4j-core and is not vulnerable to Log4Shell.		cisagov	2021-12-15
Rapid7	IntSights virtual appliance			Not Affected	link			cisagov	2021-12-15
Rapid7	Logentries DataHub	Linux version <= 1.2.0.820; Windows version <= 1.2.0.820		Affected	link	Linux: Install DataHub_1.2.0.822.deb using the following instructions. Windows: Run version 1.2.0.822 in a Docker container or as a Java command per these instructions. You can find more details here.		cisagov	2021-12-15
Rapid7	Logentries le_java logging library	All versions: this is a deprecated component		Affected	link	Migrate to version 3.0.9 of r7insight_java		cisagov	2021-12-15
Rapid7	Metasploit Framework			Not Affected	link			cisagov	2021-12-15
Rapid7	Metasploit Pro			Not Affected	link	Metasploit Pro ships with log4j but has specific configurations applied to it that mitigate Log4Shell. A future update will contain a fully patched version of log4j.		cisagov	2021-12-15
Rapid7	tCell Java Agent			Not Affected	link			cisagov	2021-12-15
Rapid7	Velociraptor			Not Affected	link			cisagov	2021-12-15
Raritan				Unknown	link			cisagov	2022-01-12
Ravelin				Unknown	link			cisagov	2022-01-12
Real-Time Innovations (RTI)	Distributed Logger			Unknown	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	Recording Console			Unknown	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	RTI Administration Console			Unknown	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	RTI Code Generator			Unknown	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	RTI Code Generator Server			Unknown	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	RTI Micro Application Generator (MAG)	as part of RTI Connext Micro 3.0.0, 3.0.1, 3.0.2, 3.0.3		Affected	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	RTI Micro Application Generator (MAG)	as part of RTI Connext Professional 6.0.0 and 6.0.1		Affected	link			cisagov	2021-12-16
Real-Time Innovations (RTI)	RTI Monitor			Unknown	link			cisagov	2021-12-16
Red Hat	log4j-core			Unknown	link			cisagov	2021-12-21
Red Hat	Red Hat Integration Camel K			Unknown	link	RHSA-2021:5130		cisagov	2021-12-21
Red Hat	Red Hat build of Quarkus			Unknown	link			cisagov	2021-12-20
Red Hat	Red Hat CodeReady Studio		12.21.0	Fixed	link	CRS 12.21.1 Patch		cisagov	2021-12-21
Red Hat	Red Hat Data Grid		8	Fixed	link	RHSA-2021:5132		cisagov	2021-12-21
Red Hat	Red Hat Decision Manager			Not Affected	link			cisagov	2021-12-20
Red Hat	Red Hat Enterprise Linux			Not Affected	link			cisagov	2021-12-20
Red Hat	Red Hat Enterprise Linux			Not Affected	link			cisagov	2021-12-20
Red Hat	Red Hat Enterprise Linux			Not Affected	link			cisagov	2021-12-20
Red Hat	Red Hat Integration Camel Quarkus			Unknown	link	RHSA-2021:5126		cisagov	2021-12-21
Red Hat	Red Hat JBoss A-MQ Streaming			Unknown	link	RHSA-2021:5138		cisagov	2021-12-21
Red Hat	Red Hat JBoss Enterprise Application Platform		7	Fixed	link	Maven Patch - Affects only the Mavenized distribution. Container, Zip and RPM distro aren't affected.		cisagov	2021-12-21
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack			Not Affected	link			cisagov	2021-12-20
Red Hat	Red Hat JBoss Fuse		7	Fixed	link	RHSA-2021:5134		cisagov	2021-12-21
Red Hat	Red Hat Process Automation		7	Fixed	link	Maven Patch - Affects only the Mavenized distribution. Container, Zip and RPM distro aren't affected.		cisagov	2021-12-21
Red Hat	Red Hat Single Sign-On			Not Affected	link			cisagov	2021-12-21
Red Hat	Red Hat Vert.X		4	Fixed	link	RHSA-2021:5093		cisagov	2021-12-21
Red Hat	Satellite 5			Unknown	link			cisagov	2021-12-21
Red Hat	Spacewalk			Unknown	link			cisagov	2021-12-21
Red Hat OpenShift Container Platform 3.11	openshift3/ose-logging-elasticsearch5			Unknown	link	RHSA-2021:5094		cisagov	2021-12-21
Red Hat OpenShift Container Platform 4	openshift4/ose-logging-elasticsearch6			Unknown	link	Please refer to Red Hat Customer Portal to find the right errata for your version.		cisagov	2021-12-21
Red Hat OpenShift Container Platform 4	openshift4/ose-metering-hive			Unknown	link	Please refer to Red Hat Customer Portal to find the right errata for your version.		cisagov	2021-12-21
Red Hat OpenShift Container Platform 4	openshift4/ose-metering-presto			Unknown	link	Please refer to Red Hat Customer Portal to find the right errata for your version.		cisagov	2021-12-21
Red Hat OpenShift Logging	logging-elasticsearch6-container			Unknown	link	Please refer to Red Hat Customer Portal to find the right errata for your version.		cisagov	2021-12-21
Red Hat OpenStack Platform 13 (Queens)	opendaylight			Unknown	link	End of Life		cisagov	2021-12-21
Red Hat Software Collections	rh-java-common-log4j			Unknown	link			cisagov	2021-12-21
Red Hat Software Collections	rh-maven35-log4j12			Unknown	link			cisagov	2021-12-21
Red Hat Software Collections	rh-maven36-log4j12			Unknown	link			cisagov	2021-12-21
Red5Pro				Unknown	link			cisagov	2022-01-12
RedGate				Unknown	link			cisagov	2022-01-12
Redis				Unknown	link			cisagov	2022-01-12
Reiner SCT				Unknown	link			cisagov	2022-01-12
ReportURI				Unknown	link			cisagov	2022-01-12
ResMed	AirView			Unknown	link			cisagov	2021-12-21
ResMed	myAir			Unknown	link			cisagov	2021-12-21
Respondus				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Revenera / Flexera				Unknown	link			cisagov	2022-01-12
Ricoh				Unknown	link			cisagov	2022-01-12
RingCentral				Unknown	link			cisagov	2022-01-12
Riverbed				Unknown	link			cisagov	2022-01-12
Rockwell Automation	FactoryTalk Analytics DataFlowML	4.00.00		Affected	link			cisagov	2021-12-15
Rockwell Automation	FactoryTalk Analytics DataView	3.03.00		Affected	link			cisagov	2021-12-15
Rockwell Automation	Industrial Data Center		Gen 1, Gen 2, Gen 3, Gen 3.5	Fixed	link			cisagov	2021-12-15
Rockwell Automation	MES EIG	3.03.00		Affected	link	Customers should upgrade to EIG Hub if possible or work with their local representatives about alternative solutions.		cisagov	2021-12-15
Rockwell Automation	VersaVirtual		Series A	Fixed	link			cisagov	2021-12-15
Rockwell Automation	Warehouse Management	4.01.00, 4.02.00, 4.02.01, 4.02.02		Affected	link			cisagov	2021-12-15
Rollbar				Unknown	link			cisagov	2022-01-12
Rosette.com				Unknown	link			cisagov	2022-01-12
RSA	SecurID Authentication Manager			Unknown				cisagov	2022-01-12
RSA	SecurID Authentication Manager Prime			Unknown				cisagov	2022-01-12
RSA	SecurID Authentication Manager WebTier			Unknown				cisagov	2022-01-12
RSA	SecurID Governance and Lifecycle			Unknown				cisagov	2022-01-12
RSA	SecurID Governance and Lifecycle Cloud			Unknown				cisagov	2022-01-12
RSA	SecurID Identity Router			Unknown				cisagov	2022-01-12
RSA Netwitness				Unknown	link			cisagov	2022-01-12
Rstudioapi	Rstudioapi			Not Affected	link			cisagov	2021-12-21
Rubrik				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Ruckus	Virtual SmartZone (vSZ)	5.1 to 6.0		Affected	link			cisagov	2021-12-13
RunDeck by PagerDuty				Unknown	link			cisagov	2022-01-12
Runecast	Runecast Analyzer		6.0.3	Fixed	link			cisagov	2022-01-12
SAE-IT				Unknown	link			cisagov	2022-01-12
SAFE FME Server				Unknown	link			cisagov	2022-01-12
SAGE				Unknown	link			cisagov	2022-01-12
SailPoint				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Salesforce	Analytics Cloud		All	Fixed	link	Analytics Cloud was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	B2C Commerce Cloud		All	Fixed	link	B2C Commerce Cloud was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	ClickSoftware (As-a-Service)		All	Fixed	link	ClickSoftware (As-a-Service) was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	ClickSoftware (On-Premise)		All	Fixed	link	ClickSoftware (On-Premise) was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046. Additional details are available here.		cisagov	2022-01-26
Salesforce	Data.com		All	Fixed	link	Data.com was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	DataLoader		>=53.0.2	Fixed	link	This version is for use with Salesforce Winter '22 or higher release through Salesforce Force Partner API and Force WSC v53.0.0. It contains the fix for CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105 by upgrading to log4j 2.17.0.		cisagov	2022-01-26
Salesforce	Datorama		All	Fixed	link	Datorama was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Evergage (Interaction Studio)		All	Fixed	link	Evergage (Interaction Studio) was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Experience (Community) Cloud		All	Fixed	link	Experience Cloud was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Force.com		All	Fixed	link	Force.com was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046. The Data Loader tool has been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046. Make sure that you are using Data Loader version 53.0.2 or later. Follow the steps described here to download the latest version of Data Loader.		cisagov	2022-01-26
Salesforce	Heroku			Not Affected	link	Heroku is reported to not be affected by the issues currently identified in CVE-2021-44228 or CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Marketing Cloud		All	Fixed	link	Salesforce-owned services within Marketing Cloud are not affected by the issues currently identified in CVE-2021-44228 or CVE-2021-45046. Third-party vendors have been patched to address the security issues currently identified in CVE-2021-44228 or CVE-2021-45046.		cisagov	2022-01-26
Salesforce	MuleSoft (Cloud)		All	Fixed	link	MuleSoft (Cloud) was affected by CVE-2021-44228 and CVE-2021-45046. Mulesoft services, including dataloader.io, have been updated to mitigate the issues currently identified in CVE-2021-44228 and CVE-2021-45046. Please see additional details here.		cisagov	2022-01-26
Salesforce	MuleSoft (On-Premise)		All	Fixed	link	MuleSoft (On-Premise) was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors, including Private Cloud Edition (PCE) and Anypoint Studio, have a mitigation in place to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046. Please see additional details here.		cisagov	2022-01-26
Salesforce	Pardot		All	Fixed	link	Pardot was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Sales Cloud		All	Fixed	link	Sales Cloud was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Service Cloud		All	Fixed	link	Service Cloud was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Slack		All	Fixed	link	Slack was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in both CVE-2021-44228 and CVE-2021-45046. Additional details are available here.		cisagov	2022-01-26
Salesforce	Social Studio		All	Fixed	link	Social Studio was affected by CVE-2021-44228 and CVE-2021-45046. Salesforce-owned services and third-party vendors have been patched to address the issues currently identified in CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Salesforce	Tableau (On-Premise)		< 2021.4.1	Fixed	link	Tableau (On-Premise) was affected by CVE-2021-44228 and CVE-2021-45046. Patches to address the issues currently identified in both CVE-2021-44228 and CVE-2021-45046 are available for download. Additional details are available here.		cisagov	2021-12-16
Salesforce	Tableau (Online)		All	Fixed	link	Tableau Online was affected by CVE-2021-44228 and CVE-2021-45046. Services have been patched to mitigate the issues currently identified in both CVE-2021-44228 and CVE-2021-45046.		cisagov	2022-01-26
Samsung Electronics America	Knox Admin Portal			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox Asset Intelligence			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox Configure			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox E-FOTA One			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox Guard			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox License Management			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox Manage		Cloud	Fixed	link			cisagov	2022-01-17
Samsung Electronics America	Knox Managed Services Provider (MSP)			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox Mobile Enrollment			Not Affected	link			cisagov	2022-01-17
Samsung Electronics America	Knox Reseller Portal		Cloud	Fixed	link			cisagov	2022-01-17
Sangoma				Unknown	link			cisagov	2022-01-12
SAP				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2021-12-17
SAP Advanced Platform				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2021-12-17
SAP BusinessObjects				Unknown	link	The support document is available to customers only and has not been reviewed by CISA		cisagov	2021-12-17
SAS				Unknown	link			cisagov	2022-01-12
SASSAFRAS				Unknown	link			cisagov	2022-01-12
Savignano software solutions				Unknown	link			cisagov	2022-01-12
SBT	SBT	<1.5.6		Affected	link			cisagov	2021-12-15
ScaleComputing				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
ScaleFusion MobileLock Pro				Unknown	link			cisagov	2022-01-12
Schneider Electric	EASYFIT	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	Ecoreal XL	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	EcoStruxure IT Expert		Cloud	Fixed				cisagov	2021-12-20
Schneider Electric	EcoStruxure IT Gateway		V1.5.0 to V1.13.0	Fixed	link			cisagov	2021-12-20
Schneider Electric	Eurotherm Data Reviewer	V3.0.2 and prior		Affected	link			cisagov	2021-12-20
Schneider Electric	Facility Expert Small Business		Cloud	Fixed	link			cisagov	2021-12-20
Schneider Electric	MSE	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	NetBotz750/755	Software versions 5.0 through 5.3.0		Affected	link			cisagov	2021-12-20
Schneider Electric	NEW630	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SDK BOM	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SDK-Docgen	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SDK-TNC	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SDK-UMS	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SDK3D2DRenderer	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SDK3D360Widget	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	Select and Config DATA	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SNC-API	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SNC-CMM	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SNCSEMTECH	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SPIMV3	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SWBEditor	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	SWBEngine	Current software and earlier		Affected	link			cisagov	2021-12-20
Schneider Electric	Wiser by SE platform		Cloud	Fixed				cisagov	2021-12-20
Schweitzer Engineering Laboratories				Unknown	link			cisagov	2021-12-21
SCM Manager				Unknown	link			cisagov	2022-01-12
ScreenBeam				Unknown	link			cisagov	2022-01-12
SDL worldServer				Unknown	link			cisagov	2022-01-12
Seagull Scientific				Unknown	link			cisagov	2022-01-12
SecurePoint				Unknown	link			cisagov	2022-01-12
Security Onion				Unknown	link			cisagov	2022-01-12
Securonix	Extended Detection and Response (XDR)	All		Affected	link	Patching ongoing as of 12/10/2021		cisagov	2021-12-10
Securonix	Next Gen SIEM	All		Affected	link	Patching ongoing as of 12/10/2021		cisagov	2021-12-10
Securonix	Security Analytics and Operations Platform (SOAR)	All		Affected	link	Patching ongoing as of 12/10/2021		cisagov	2021-12-10
Securonix	SNYPR Application			Unknown	link			cisagov	2021-12-10
Securonix	User and Entity Behavior Analytics(UEBA)	All		Affected	link	Patching ongoing as of 12/10/2021		cisagov	2021-12-10
Seeburger				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA.		cisagov	2022-01-12
SentinelOne				Unknown	link			cisagov	2022-01-12
Sentry				Unknown	link			cisagov	2022-01-12
SEP				Unknown	link			cisagov	2022-01-12
Server Eye				Unknown	link			cisagov	2022-01-12
ServiceNow				Unknown	link			cisagov	2022-01-12
Shibboleth				Unknown	link			cisagov	2022-01-12
Shibboleth	All Products			Not Affected	link			cisagov	2021-12-10
Shopify				Unknown	link			cisagov	2022-01-12
Siebel				Unknown	link			cisagov	2022-01-12
Siemens	Affected Products			Unknown	link	Siemens requests: See pdf for the complete list of affected products, CSAF for automated parsing of data		cisagov	2021-12-22
Siemens	Affected Products			Unknown	link	Siemens requests: See pdf for the complete list of affected products, CSAF for automated parsing of data		cisagov	2021-12-19
Siemens Energy	Affected Products			Unknown	link	Siemens requests: See pdf for the complete list of affected products, CSAF for automated parsing of data		cisagov	2021-12-21
Siemens Energy	Affected Products			Unknown	link	Siemens requests: See pdf for the complete list of affected products, CSAF for automated parsing of data		cisagov	2021-12-20
Siemens Energy	Affected Products			Unknown	link	Siemens requests: See pdf for the complete list of affected products, CSAF for automated parsing of data		cisagov	2021-12-16
Siemens Healthineers	ATELLICA DATA MANAGER v1.1.1 / v1.2.1 / v1.3.1			Unknown	link	If you have determined that your Atellica Data Manager has a “Java communication engine” service, and you require an immediate mitigation, then please contact your Siemens Customer Care Center or your local Siemens technical support representative.		cisagov	2021-12-22
Siemens Healthineers	CENTRALINK v16.0.2 / v16.0.3			Unknown	link	If you have determined that your CentraLink has a “Java communication engine” service, and you require a mitigation, then please contact your Siemens Customer Care Center or your local Siemens technical support representative.		cisagov	2021-12-22
Siemens Healthineers	Cios Flow S1 / Alpha / Spin VA30			Unknown	link	evaluation ongoing		cisagov	2021-12-22
Siemens Healthineers	Cios Select FD/I.I. VA21 / VA21-S3P			Unknown	link	evaluation ongoing		cisagov	2021-12-22
Siemens Healthineers	DICOM Proxy VB10A			Unknown	link	Workaround: remove the vulnerable class from the .jar file		cisagov	2021-12-22
Siemens Healthineers	go.All, Som10 VA20 / VA30 / VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	go.Fit, Som10 VA30			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	go.Now, Som10 VA10 / VA20 / VA30 / VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	go.Open Pro, Som10 VA30 / VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	go.Sim, Som10 VA30 / VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	go.Top, Som10 VA20 / VA20A_SP5 / VA30 / VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	go.Up, Som10 VA10 / VA20 / VA30 / VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM AERA 1,5T, MAGNETOM PRISMA, MAGNETOM PRISMA FIT, MAGNETOM SKYRA 3T NUMARIS/X VA30A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Altea NUMARIS/X VA20A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM ALTEA, MAGNETOM LUMINA, MAGNETOM SOLA, MAGNETOM VIDA NUMARIS/X VA31A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Amira NUMARIS/X VA12M			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Free.Max NUMARIS/X VA40			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Lumina NUMARIS/X VA20A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Sempra NUMARIS/X VA12M			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Sola fit NUMARIS/X VA20A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Sola NUMARIS/X VA20A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Vida fit NUMARIS/X VA20A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	MAGNETOM Vida NUMARIS/X VA10A* / VA20A			Unknown	link	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for "need to access" systems to network port 8090 in case a second console is connected.		cisagov	2021-12-22
Siemens Healthineers	SENSIS DMCC / DMCM / TS / VM / PPWS / DS VD12A			Unknown	link	evaluation ongoing		cisagov	2021-12-22
Siemens Healthineers	Somatom Emotion Som5 VC50			Unknown	link	evaluation ongoing		cisagov	2021-12-22
Siemens Healthineers	Somatom Scope Som5 VC50			Unknown	link	evaluation ongoing		cisagov	2021-12-22
Siemens Healthineers	Syngo Carbon Space VA10A / VA10A-CUT2 / VA20A			Unknown	link	Workaround: remove the vulnerable class from the .jar file		cisagov	2021-12-22
Siemens Healthineers	Syngo MobileViewer VA10A			Unknown	link	The vulnerability will be patch/mitigated in upcoming releases\patches.		cisagov	2021-12-22
Siemens Healthineers	syngo Plaza VB20A / VB20A_HF01 - HF07 / VB30A / VB30A_HF01 / VB30A_HF02 / VB30B / VB30C / VB30C_HF01 - HF06 / VB30C_HF91			Unknown	link	Workaround: remove the vulnerable class from the .jar file		cisagov	2021-12-22
Siemens Healthineers	syngo Workflow MLR VB37A / VB37A_HF01 / VB37A_HF02 / VB37B / VB37B_HF01 - HF07 / VB37B_HF93 / VB37B_HF94 / VB37B_HF96			Unknown	link	Please contact your Customer Service to get support on mitigating the vulnerability.		cisagov	2021-12-22
Siemens Healthineers	syngo.via VB20A / VB20A_HF01 - HF08 / VB20A_HF91 / VB20B / VB30A / VB30A_HF01 - VB30A_HF08 / VB30A_HF91VB30B / VB30B_HF01 / VB40A / VB40A_HF01 - HF02 /VB40B / VB40B_HF01 - HF05 / VB50A / VB50A_CUT / VB50A_D4VB50B / VB50B_HF01 - HF03 / VB60A / VB60A_CUT / VB60A_D4 / VB60A_HF01			Unknown	link	Workaround: remove the vulnerable class from the .jar file		cisagov	2021-12-22
Siemens Healthineers	syngo.via WebViewer VA13B / VA20A / VA20B			Unknown	link	Workaround: remove the vulnerable class from the .jar file		cisagov	2021-12-22
Siemens Healthineers	X.Ceed Somaris 10 VA40*			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Siemens Healthineers	X.Cite Somaris 10 VA30/VA40			Unknown	link	Workaround: In the meantime, we recommend preventing access to port 8090 from other devices by configuration of the hospital network.		cisagov	2021-12-22
Sierra Wireless				Unknown	link			cisagov	2022-01-12
Sierra Wireless	AirVantage and Octave cloud platforms			Unknown	link	These systems do not operate with the specific non-standard configuration required for CVE-2021-25046 and hence were not vulnerable to it.		cisagov	2022-01-05
Sierra Wireless	AM/AMM servers			Unknown	link			cisagov	2022-01-05
Signald				Unknown	link			cisagov	2022-01-12
Silver Peak	Orchestrator, Silver Peak GMS			Unknown	link	Customer managed Orchestrator and legacy GMS products are affected by this vulnerability. This includes on-premise and customer managed instances running in public cloud services such as AWS, Azure, Google, or Oracle Cloud. See Corrective Action Required for details about how to mitigate this exploit.		cisagov	2021-12-14
SingleWire				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
SISCO				Unknown	link			cisagov	2022-01-05
Sitecore				Unknown	link			cisagov	2022-01-12
Skillable				Unknown	link			cisagov	2022-01-12
SLF4J				Unknown	link			cisagov	2022-01-12
Slurm	Slurm			Not Affected	link			cisagov	2021-12-21
SMA Solar Technology AG				Unknown	link			cisagov	2022-01-05
SmartBear				Unknown	link			cisagov	2022-01-12
SmileCDR				Unknown	link			cisagov	2022-01-12
Sn0m				Unknown	link			cisagov	2022-01-12
Snakemake	Snakemake			Not Affected	link			cisagov	2021-12-21
Snow Software	Snow Commander		8.1 to 8.10.2	Fixed	link			cisagov	2022-01-12
Snow Software	VM Access Proxy		v3.1 to v3.6	Fixed	link			cisagov	2022-01-12
Snowflake				Unknown	link			cisagov	2022-01-12
Snyk	Cloud Platform			Unknown	link			cisagov	2022-01-12
Software AG				Unknown	link			cisagov	2022-01-12
SolarWinds	Database Performance Analyzer (DPA)	2021.1.x, 2021.3.x, 2022.1.x		Affected	link	For more information, please see the following KB article: link		cisagov	2021-12-23
SolarWinds	Orion Platform			Unknown	link			cisagov	2021-12-23
SolarWinds	Server & Application Monitor (SAM)	SAM 2020.2.6 and later		Affected	link	For more information, please see the following KB article for the latest details specific to the SAM hotfix: link		cisagov	2021-12-23
SonarSource				Unknown	link			cisagov	2022-01-12
Sonatype	All Products			Not Affected	link	Sonatype uses logback as the default logging solution as opposed to log4j. This means our software including Nexus Lifecycle, Nexus Firewall, Nexus Repository OSS and Nexus Repository Pro in versions 2.x and 3.x are NOT affected by the reported log4j vulnerabilities. We still advise keeping your software upgraded at the latest version.		cisagov	2021-12-29
SonicWall	Access Points			Unknown	link	Log4j2 not used in the SonicWall Access Points		cisagov	2021-12-12
SonicWall	Analytics			Unknown	link	Under Review		cisagov	2021-12-12
SonicWall	Analyzer			Unknown	link	Under Review		cisagov	2021-12-12
SonicWall	Capture Client & Capture Client Portal			Unknown	link	Log4j2 not used in the Capture Client.		cisagov	2021-12-12
SonicWall	Capture Security Appliance			Unknown	link	Log4j2 not used in the Capture Security appliance.		cisagov	2021-12-12
SonicWall	CAS			Unknown	link	Under Review		cisagov	2021-12-12
SonicWall	Email Security			Unknown	link	ES 10.0.11 and earlier versions are impacted		cisagov	2021-12-17
SonicWall	Gen5 Firewalls (EOS)			Unknown	link	Log4j2 not used in the appliance.		cisagov	2021-12-12
SonicWall	Gen6 Firewalls			Unknown	link	Log4j2 not used in the appliance.		cisagov	2021-12-12
SonicWall	Gen7 Firewalls			Unknown	link	Log4j2 not used in the appliance.		cisagov	2021-12-12
SonicWall	GMS			Unknown	link	Under Review		cisagov	2021-12-12
SonicWall	MSW			Unknown	link	Mysonicwall service doesn't use Log4j		cisagov	2021-12-12
SonicWall	NSM			Unknown	link	NSM On-Prem and SaaS doesn't use a vulnerable version		cisagov	2021-12-12
SonicWall	SMA 100			Unknown	link	Log4j2 not used in the SMA100 appliance.		cisagov	2021-12-12
SonicWall	SMA 1000			Unknown	link	Version 12.1.0 and 12.4.1 doesn't use a vulnerable version		cisagov	2021-12-12
SonicWall	SonicCore			Unknown	link	SonicCore doesn't use a Log4j2		cisagov	2021-12-12
SonicWall	SonicWall Switch			Unknown	link	Log4j2 not used in the SonicWall Switch.		cisagov	2021-12-12
SonicWall	WAF			Unknown	link	Under Review		cisagov	2021-12-12
SonicWall	WNM			Unknown	link	Log4j2 not used in the WNM.		cisagov	2021-12-12
SonicWall	WXA			Unknown	link	WXA doesn't use a vulnerable version		cisagov	2021-12-12
Sophos	Cloud Optix			Unknown	link	Users may have noticed a brief outage around 12:30 GMT as updates were deployed. There was no evidence that the vulnerability was exploited and to our knowledge no customers are impacted.		cisagov	2021-12-12
Sophos	Reflexion			Unknown	link	Reflexion does not run an exploitable configuration.		cisagov	2021-12-12
Sophos	SG UTM (all versions)			Unknown	link	Sophos SG UTM does not use Log4j.		cisagov	2021-12-12
Sophos	SG UTM Manager (SUM) (all versions)			Not Affected	link	SUM does not use Log4j.		cisagov	2021-12-12
Sophos	Sophos Central			Unknown	link	Sophos Central does not run an exploitable configuration.		cisagov	2021-12-12
Sophos	Sophos Firewall (all versions)			Unknown	link	Sophos Firewall does not use Log4j.		cisagov	2021-12-12
Sophos	Sophos Home			Unknown	link	Sophos Home does not use Log4j.		cisagov	2021-12-12
Sophos	Sophos Mobile			Unknown	link	Sophos Mobile (in Central, SaaS, and on-premises) does not run an exploitable configuration.		cisagov	2021-12-12
Sophos	Sophos Mobile EAS Proxy	< 9.7.2		Affected	link	The Sophos Mobile EAS Proxy, running in Traffic Mode, is affected. Customers will need to download and install version 9.7.2, available from Monday December 13, 2021, on the same machine where it is currently running. PowerShell mode is not affected. Customers can download the Standalone EAS Proxy Installer version 9.7.2 from the Sophos website.		cisagov	2021-12-12
Sophos	Sophos ZTNA			Unknown	link	Sophos ZTNA does not use Log4j.		cisagov	2021-12-12
SOS Berlin				Unknown	link			cisagov	2022-01-12
Spacelabs Healthcare	ABP			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	CardioExpress			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	DM3 and DM4 Monitors			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Eclipse Pro			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	EVO			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Intesys Clinical Suite (ICS)			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Intesys Clinical Suite (ICS) Clinical Access Workstations			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Lifescreen Pro			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Pathfinder SL			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Qube			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	Qube Mini			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	SafeNSound		4.3.1	Fixed	link	Version >4.3.1 - Not Affected		cisagov	2022-01-05
Spacelabs Healthcare	Sentinel			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Spacelabs Cloud			Unknown	link			cisagov	2022-01-05
Spacelabs Healthcare	Ultraview SL			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	Xhibit Telemetry Receiver (XTR)			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	Xhibit, XC4			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	XprezzNet			Not Affected	link			cisagov	2022-01-05
Spacelabs Healthcare	Xprezzon			Not Affected	link			cisagov	2022-01-05
Spambrella				Unknown	link			cisagov	2022-01-12
Spigot				Unknown	link			cisagov	2022-01-12
Splunk	Data Stream Processor	DSP 1.0.x, DSP 1.1.x, DSP 1.2.x		Affected	link			cisagov	2021-12-30
Splunk	IT Essentials Work App ID 5403	4.11, 4.10.x (Cloud only), 4.9.x		Affected	link			cisagov	2021-12-30
Splunk	IT Service Intelligence (ITSI) App ID 1841	4.11.0, 4.10.x (Cloud only), 4.9.x, 4.8.x (Cloud only), 4.7.x, 4.6.x, 4.5.x		Affected	link			cisagov	2021-12-30
Splunk	Splunk Add-On for Java Management Extensions App ID 2647	5.2.0 and older		Affected	link			cisagov	2021-12-30
Splunk	Splunk Add-On for Tomcat App ID 2911	3.0.0 and older		Affected	link			cisagov	2021-12-30
Splunk	Splunk Application Performance Monitoring	Current		Affected	link			cisagov	2021-12-30
Splunk	Splunk Connect for Kafka	All versions prior to 2.0.4		Affected	link			cisagov	2021-12-30
Splunk	Splunk Enterprise (including instance types like Heavy Forwarders)	All supported non-Windows versions of 8.1.x and 8.2.x only if DFS is used. See Removing Log4j from Splunk Enterprise below for guidance on unsupported versions.		Affected	link			cisagov	2021-12-30
Splunk	Splunk Enterprise Amazon Machine Image (AMI)	See Splunk Enterprise		Affected	link			cisagov	2021-12-30
Splunk	Splunk Enterprise Docker Container	See Splunk Enterprise		Affected	link			cisagov	2021-12-30
Splunk	Splunk Infrastructure Monitoring	Current		Affected	link			cisagov	2021-12-30
Splunk	Splunk Log Observer	Current		Affected	link			cisagov	2021-12-30
Splunk	Splunk Logging Library for Java	1.11.0 and older		Affected	link			cisagov	2021-12-30
Splunk	Splunk On-call / VictorOps	Current		Affected	link			cisagov	2021-12-30
Splunk	Splunk OVA for VMWare App ID 3216	4.0.3 and older		Affected	link			cisagov	2021-12-30
Splunk	Splunk OVA for VMWare Metrics App ID 5096	4.2.1 and older		Affected	link			cisagov	2021-12-30
Splunk	Splunk Real User Monitoring	Current		Affected	link			cisagov	2021-12-30
Splunk	Splunk Splunk Add-On for JBoss App ID 2954	3.0.0 and older		Affected	link			cisagov	2021-12-30
Splunk	Splunk Synthetics	Current		Affected	link			cisagov	2021-12-30
Splunk	Splunk UBA OVA Software	5.0.3a, 5.0.0		Affected	link			cisagov	2021-12-30
Splunk	Splunk VMWare OVA for ITSI App ID 4760	1.1.1 and older		Affected	link			cisagov	2021-12-30
Sprecher Automation				Unknown	link			cisagov	2022-01-12
Spring	Spring Boot			Unknown	link	Spring Boot users are only affected by this vulnerability if they have switched the default logging system to Log4J2		cisagov	2022-01-12
Spring Boot				Unknown	link			cisagov	2022-01-12
StarDog				Unknown	link			cisagov	2022-01-12
STERIS	Advantage			Unknown	link			cisagov	2021-12-22
STERIS	Advantage Plus			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 2000 SERIES WASHER DISINFECTORS			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 3000 SERIES WASHER DISINFECTORS			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 400 MEDIUM STEAM STERILIZER			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 400 SMALL STEAM STERILIZERS			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 5000 SERIES WASHER DISINFECTORS			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 600 MEDIUM STEAM STERILIZER			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO 7000 SERIES WASHER DISINFECTORS			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO CENTURY MEDIUM STEAM STERILIZER			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO CENTURY SMALL STEAM STERILIZER			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO EAGLE 3000 SERIES STAGE 3 STEAM STERILIZERS			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO EVOLUTION FLOOR LOADER STEAM STERILIZER			Unknown	link			cisagov	2021-12-22
STERIS	AMSCO EVOLUTION MEDIUM STEAM STERILIZER			Unknown	link			cisagov	2021-12-22
STERIS	Canexis 1.0			Unknown	link			cisagov	2021-12-22
STERIS	CELERITY HP INCUBATOR			Unknown	link			cisagov	2021-12-22
STERIS	CELERITY STEAM INCUBATOR			Unknown	link			cisagov	2021-12-22
STERIS	CER Optima			Unknown	link			cisagov	2021-12-22
STERIS	Clarity Software			Unknown	link			cisagov	2021-12-22
STERIS	Connect Software			Unknown	link			cisagov	2021-12-22
STERIS	ConnectAssure Technology			Unknown	link			cisagov	2021-12-22
STERIS	ConnectoHIS			Unknown	link			cisagov	2021-12-22
STERIS	CS-iQ Sterile Processing Workflow			Unknown	link			cisagov	2021-12-22
STERIS	DSD Edge			Unknown	link			cisagov	2021-12-22
STERIS	DSD-201,			Unknown	link			cisagov	2021-12-22
STERIS	EndoDry			Unknown	link			cisagov	2021-12-22
STERIS	Endora			Unknown	link			cisagov	2021-12-22
STERIS	Harmony iQ Integration Systems			Unknown	link			cisagov	2021-12-22
STERIS	Harmony iQ Perspectives Image Management System			Unknown	link			cisagov	2021-12-22
STERIS	HexaVue			Unknown	link			cisagov	2021-12-22
STERIS	HexaVue Integration System			Unknown	link			cisagov	2021-12-22
STERIS	IDSS Integration System			Unknown	link			cisagov	2021-12-22
STERIS	RapidAER			Unknown	link			cisagov	2021-12-22
STERIS	ReadyTracker			Unknown	link			cisagov	2021-12-22
STERIS	RealView Visual Workflow Management System			Unknown	link			cisagov	2021-12-22
STERIS	RELIANCE 444 WASHER DISINFECTOR			Unknown	link			cisagov	2021-12-22
STERIS	RELIANCE SYNERGY WASHER DISINFECTOR			Unknown	link			cisagov	2021-12-22
STERIS	RELIANCE VISION 1300 SERIES CART AND UTENSIL WASHER DISINFECTORS			Unknown	link			cisagov	2021-12-22
STERIS	RELIANCE VISION MULTI- CHAMBER WASHER DISINFECTOR			Unknown	link			cisagov	2021-12-22
STERIS	RELIANCE VISION SINGLE CHAMBER WASHER DISINFECTOR			Unknown	link			cisagov	2021-12-22
STERIS	Renatron			Unknown	link			cisagov	2021-12-22
STERIS	ScopeBuddy+			Unknown	link			cisagov	2021-12-22
STERIS	SecureCare ProConnect Technical Support Services			Unknown	link			cisagov	2021-12-22
STERIS	Situational Awareness for Everyone Display (S.A.F.E.)			Unknown	link			cisagov	2021-12-22
STERIS	SPM Surgical Asset Tracking Software			Unknown	link			cisagov	2021-12-22
STERIS	SYSTEM 1 endo LIQUID CHEMICAL STERILANT PROCESSING SYSTEM			Unknown	link			cisagov	2021-12-22
STERIS	V-PRO 1 LOW TEMPERATURE STERILIZATION SYSTEM			Unknown	link			cisagov	2021-12-22
STERIS	V-PRO 1 PLUS LOW TEMPERATURE STERILIZATION SYSTEM			Unknown	link			cisagov	2021-12-22
STERIS	V-PRO MAX 2 LOW TEMPERATURE STERILIZATION SYSTEM			Unknown	link			cisagov	2021-12-22
STERIS	V-PRO MAX LOW TEMPERATURE STERILIZATION SYSTEM			Unknown	link			cisagov	2021-12-22
STERIS	V-PRO S2 LOW TEMPERATURE STERILIZATION SYSTEM			Unknown	link			cisagov	2021-12-22
STERIS	VERIFY INCUBATOR FOR ASSERT SELF-CONTAINED BIOLOGICAL INDICATORS			Unknown	link			cisagov	2021-12-22
Sterling Order IBM				Unknown	link			cisagov	2022-01-12
Storagement				Unknown	link			cisagov	2022-01-12
StormShield				Unknown	link			cisagov	2022-01-12
StrangeBee TheHive & Cortex				Unknown	link			cisagov	2022-01-12
Stratodesk				Unknown	link			cisagov	2022-01-12
Strimzi				Unknown	link			cisagov	2022-01-12
Stripe				Unknown	link			cisagov	2022-01-12
Styra				Unknown	link			cisagov	2022-01-12
Sumologic				Unknown	link			cisagov	2022-01-12
SumoLogic				Unknown	link			cisagov	2022-01-12
Superna EYEGLASS				Unknown	link			cisagov	2022-01-12
Suprema Inc				Unknown	link			cisagov	2022-01-12
SUSE				Unknown	link			cisagov	2022-01-12
Sweepwidget				Unknown	link			cisagov	2022-01-12
Swyx				Unknown	link			cisagov	2022-01-12
Synchro MSP				Unknown	link			cisagov	2022-01-12
Syncplify				Unknown	link			cisagov	2022-01-12
Synology				Unknown	link			cisagov	2022-01-12
Synopsys				Unknown	link			cisagov	2022-01-12
Syntevo				Unknown	link			cisagov	2022-01-12
SysAid				Unknown	link			cisagov	2022-01-12
Sysdig				Unknown	link			cisagov	2022-01-12
Tableau	Tableau Bridge	The following versions and lower: 20214.21.1109.1748, 20213.21.1112.1434, 20212.21.0818.1843, 20211.21.0617.1133, 20204.21.0217.1203, 20203.20.0913.2112, 20202.20.0721.1350, 20201.20.0614.2321, 20194.20.0614.2307, 20193.20.0614.2306, 20192.19.0917.1648, 20191.19.0402.1911, 20183.19.0115.1143		Affected	link			cisagov	2021-12-22
Tableau	Tableau Desktop	The following versions and lower: 2021.4, 2021.3.4, 2021.2.5, 2021.1.8, 2020.4.11, 2020.3.14, 2020.2.19, 2020.1.22, 2019.4.25, 2019.3.26, 2019.2.29, 2019.1.29, 2018.3.29		Affected	link			cisagov	2021-12-22
Tableau	Tableau Prep Builder	The following versions and lower: 22021.4.1, 2021.3.2, 2021.2.2, 2021.1.4, 2020.4.1, 2020.3.3, 2020.2.3, 2020.1.5, 2019.4.2, 2019.3.2, 2019.2.3, 2019.1.4, 2018.3.3		Affected	link			cisagov	2021-12-22
Tableau	Tableau Public Desktop Client	The following versions and lower: 2021.4		Affected	link			cisagov	2021-12-22
Tableau	Tableau Reader	The following versions and lower: 2021.4		Affected	link			cisagov	2021-12-22
Tableau	Tableau Server	The following versions and lower: 2021.4, 2021.3.4, 2021.2.5, 2021.1.8, 2020.4.11, 2020.3.14, 2020.2.19, 2020.1.22, 2019.4.25, 2019.3.26, 2019.2.29, 2019.1.29, 2018.3.29		Affected	link			cisagov	2021-12-22
Talend				Unknown	link			cisagov	2022-01-12
Tanium	All			Not Affected	link	Tanium does not use Log4j.		cisagov	2021-12-21
TealiumIQ				Unknown	link			cisagov	2022-01-12
TeamPasswordManager				Unknown	link			cisagov	2022-01-12
Teamviewer				Unknown	link			cisagov	2022-01-12
Tech Software	OneAegis (f/k/a IRBManager)			Not Affected	link	OneAegis does not use Log4j.		cisagov	2021-12-15
Tech Software	SMART			Not Affected	link	SMART does not use Log4j.		cisagov	2021-12-15
Tech Software	Study Binders			Not Affected	link	Study Binders does not use Log4j.		cisagov	2021-12-15
TechSmith				Unknown	link			cisagov	2022-01-12
Telestream				Unknown	link			cisagov	2022-01-12
Tenable	Tenable.io / Nessus			Unknown	link	None of Tenable’s products are running the version of Log4j vulnerable to CVE-2021-44228 or CVE-2021-45046 at this time		cisagov	2022-01-12
Thales	CADP/SafeNet Protect App (PA) - JCE			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Application Data Protection (CADP) – CAPI.net & Net Core			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Batch Data Transformation (BDT) 2.3			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Cloud Key Manager (CCKM) Appliance			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Cloud Key Manager (CCKM) Embedded			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Database Protection			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Manager			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Transparent Encryption (CTE/VTE/CTE-U)			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Vaulted Tokenization (CT-V) / SafeNet Tokenization Manager			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust Vaultless Tokenization (CTS, CT-VL)			Unknown	link			cisagov	2021-12-17
Thales	CipherTrust/SafeNet PDBCTL			Unknown	link			cisagov	2021-12-17
Thales	Crypto Command Center (CCC)			Unknown	link			cisagov	2021-12-17
Thales	Data Protection on Demand			Unknown	link			cisagov	2021-12-17
Thales	Data Security Manager (DSM)			Unknown	link			cisagov	2021-12-17
Thales	KeySecure			Unknown	link			cisagov	2021-12-17
Thales	Luna EFT			Unknown	link			cisagov	2021-12-17
Thales	Luna Network, PCIe, Luna USB HSM and backup devices			Unknown	link			cisagov	2021-12-17
Thales	Luna SP			Unknown	link			cisagov	2021-12-17
Thales	payShield Monitor			Unknown	link			cisagov	2021-12-17
Thales	ProtectServer HSMs			Unknown	link			cisagov	2021-12-17
Thales	SafeNet Authentication Client			Unknown	link			cisagov	2021-12-17
Thales	SafeNet eToken (all products)			Unknown	link			cisagov	2021-12-17
Thales	SafeNet IDPrime Virtual			Unknown	link			cisagov	2021-12-17
Thales	SafeNet IDPrime(all products)			Unknown	link			cisagov	2021-12-17
Thales	SafeNet LUKS			Unknown	link			cisagov	2021-12-17
Thales	SafeNet PKCS#11 and TDE			Unknown	link			cisagov	2021-12-17
Thales	SafeNet ProtectApp (PA) CAPI, .Net & Net Core			Unknown	link			cisagov	2021-12-17
Thales	SafeNet ProtectDB (PDB)			Unknown	link			cisagov	2021-12-17
Thales	Safenet ProtectFile and ProtectFile- Fuse			Unknown	link			cisagov	2021-12-17
Thales	SafeNet ProtectV			Unknown	link			cisagov	2021-12-17
Thales	SafeNet SQL EKM			Unknown	link			cisagov	2021-12-17
Thales	SafeNet Transform Utility (TU)			Unknown	link			cisagov	2021-12-17
Thales	SafeNet Trusted Access (STA)			Unknown	link			cisagov	2021-12-17
Thales	SafeNet Vaultless Tokenization			Unknown	link			cisagov	2021-12-17
Thales	SAS on Prem (SPE/PCE)			Unknown	link			cisagov	2021-12-17
Thales	Sentinel Connect			Unknown	link			cisagov	2021-12-17
Thales	Sentinel EMS Enterprise aaS			Unknown	link			cisagov	2021-12-17
Thales	Sentinel EMS Enterprise OnPremise			Unknown	link			cisagov	2021-12-17
Thales	Sentinel Envelope			Unknown	link			cisagov	2021-12-17
Thales	Sentinel ESDaaS			Unknown	link			cisagov	2021-12-17
Thales	Sentinel HASP, Legacy dog, Maze, Hardlock			Unknown	link			cisagov	2021-12-17
Thales	Sentinel LDK EMS (LDK-EMS)			Unknown	link			cisagov	2021-12-17
Thales	Sentinel LDKaas (LDK-EMS)			Unknown	link			cisagov	2021-12-17
Thales	Sentinel Professional Services components (both Thales hosted & hosted on-premises by customers)			Unknown	link			cisagov	2021-12-17
Thales	Sentinel RMS			Unknown	link			cisagov	2021-12-17
Thales	Sentinel SCL			Unknown	link			cisagov	2021-12-17
Thales	Sentinel Superdog, SuperPro, UltraPro, SHK			Unknown	link			cisagov	2021-12-17
Thales	Sentinel Up			Unknown	link			cisagov	2021-12-17
Thales	Thales Data Platform (TDP)(DDC)			Unknown	link			cisagov	2021-12-17
Thales	Thales payShield 10k			Unknown	link			cisagov	2021-12-17
Thales	Thales payShield 9000			Unknown	link			cisagov	2021-12-17
Thales	Thales payShield Manager			Unknown	link			cisagov	2021-12-17
Thales	Vormetirc Key Manager (VKM)			Unknown	link			cisagov	2021-12-17
Thales	Vormetric Application Encryption (VAE)			Unknown	link			cisagov	2021-12-17
Thales	Vormetric Protection for Terradata Database (VPTD)			Unknown	link			cisagov	2021-12-17
Thales	Vormetric Tokenization Server (VTS)			Unknown	link			cisagov	2021-12-17
Thermo Fisher Scientific				Unknown	link			cisagov	2021-12-22
Thermo-Calc	Thermo-Calc			Not Affected	link	Use the program as normal, Install the 2022a patch when available		cisagov	2021-12-22
Thermo-Calc	Thermo-Calc			Not Affected	link	Use the program as normal		cisagov	2021-12-22
Thermo-Calc	Thermo-Calc			Not Affected	link	Use the program as normal, delete the Log4j 2 files in the program installation if required, see advisory for instructions.		cisagov	2021-12-22
Thermo-Calc	Thermo-Calc			Not Affected	link	Use the program as normal		cisagov	2021-12-22
Thomson Reuters	HighQ Appliance	<3.5		Affected	link	Reported by vendor - Documentation is in vendor's client portal (login required). This advisory is available to customer only and has not been reviewed by CISA.		cisagov	2021-12-20
ThreatLocker				Unknown	link			cisagov	2022-01-12
ThycoticCentrify	Account Lifecycle Manager			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Cloud Suite			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Connection Manager			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	DevOps Secrets Vault			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Password Reset Server			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Privilege Manager			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Privileged Behavior Analytics			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Secret Server			Not Affected	link			cisagov	2021-12-10
ThycoticCentrify	Server Suite			Not Affected	link			cisagov	2021-12-10
Tibco				Unknown	link			cisagov	2022-01-12
Top Gun Technology (TGT)				Unknown	link			cisagov	2022-01-12
TopDesk				Unknown	link			cisagov	2022-01-12
Topicus Security	Topicus KeyHub			Not Affected	link			cisagov	2021-12-20
Topix				Unknown	link			cisagov	2022-01-12
Tosibox				Unknown	link			cisagov	2022-01-12
TPLink	Omega Controller	Linux/Windows(all)		Affected	link	Update is Beta. Reddit: overwritten vulnerable log4j with 2.15 files as potential workaround. Though that should now be done with 2.16	Tp Community Link,Reddit Link	cisagov	2021-12-15
TrendMicro	All			Unknown	link			cisagov	2022-01-12
Tricentis Tosca				Unknown	link			cisagov	2022-01-12
Tridium				Unknown	link	Document access requires authentication. CISA is not able to validate vulnerability status.		cisagov	2022-01-19
Trimble	eCognition	10.2.0 Build 4618		Affected		Remediation steps provided by Trimble		cisagov	2021-12-23
Tripp Lite	LX Platform devices (includes WEBCARDLX, WEBCARDLXMINI, SRCOOLNETLX, SRCOOLNET2LX and devices with pre-installed or embedded WEBCARDLX interfaces)			Unknown	link			cisagov	2022-01-04
Tripp Lite	PowerAlert Local (PAL)			Unknown	link	Some versions of PAL use log4j v1 which is NOT AFFECTED by the CVE-2021-44228 vulnerability.		cisagov	2022-01-04
Tripp Lite	PowerAlert Network Management System (PANMS)			Unknown	link	Some versions of PAL use log4j v1 which is NOT AFFECTED by the CVE-2021-44228 vulnerability.		cisagov	2022-01-04
Tripp Lite	PowerAlert Network Shutdown Agent (PANSA)			Unknown	link	Some versions of PANSA use log4j v1 which is NOT AFFECTED by the CVE-2021-44228 vulnerability.		cisagov	2022-01-04
Tripp Lite	PowerAlertElement Manager (PAEM)	1.0.0		Affected	link	Tripp Lite will soon be issuing a patch in the form of PAEM 1.0.1 which will contain a patched version of Log4j2		cisagov	2022-01-04
Tripp Lite	SNMPWEBCARD, SRCOOLNET, SRCOOLNET2 and devices with pre-installed or embedded SNMPWEBCARD			Unknown	link			cisagov	2022-01-04
Tripp Lite	TLNETCARD and associated software			Unknown	link			cisagov	2022-01-04
Tripwire				Unknown	link			cisagov	2022-01-12
TrueNAS				Unknown	link			cisagov	2022-01-12
Tufin				Unknown	link			cisagov	2022-01-12
TYPO3				Unknown	link			cisagov	2022-01-12
Ubiquiti	UniFi Network Application	6.5.53 & lower versions		Affected	link			cisagov	2022-01-12
Ubiquiti	UniFi Network Controller	6.5.54 & lower versions		Affected	link		6.5.54 is reported to still be vulnerable. 6.5.55 is the new recommendation for mitigatin log4j vulnerabilities by updating to log4j 2.16.0	cisagov	2021-12-15
Ubuntu				Unknown	link			cisagov	2022-01-12
UiPath	InSights	20.10		Affected	link			cisagov	2021-12-15
Umbraco				Unknown	link			cisagov	2022-01-12
UniFlow				Unknown	link			cisagov	2022-01-12
Unify ATOS				Unknown	link			cisagov	2022-01-12
Unimus				Unknown	link			cisagov	2022-01-12
USSIGNAL MSP				Unknown	link			cisagov	2022-01-12
Varian	Acuity	All		Affected	link			cisagov	2021-12-22
Varian	ARIA Connect (Cloverleaf)			Not Affected	link			cisagov	2021-12-22
Varian	ARIA eDOC			Not Affected	link			cisagov	2021-12-22
Varian	ARIA oncology information system for Medical Oncology			Not Affected	link			cisagov	2021-12-22
Varian	ARIA oncology information system for Radiation Oncology			Not Affected	link			cisagov	2021-12-22
Varian	ARIA Radiation Therapy Management System (RTM)			Not Affected	link			cisagov	2021-12-22
Varian	Bravos Console			Not Affected	link			cisagov	2021-12-22
Varian	Clinac	All		Affected	link			cisagov	2021-12-22
Varian	Cloud Planner			Not Affected	link			cisagov	2021-12-22
Varian	DITC	All		Affected	link			cisagov	2021-12-22
Varian	DoseLab			Not Affected	link			cisagov	2021-12-22
Varian	Eclipse treatment planning software			Not Affected	link			cisagov	2021-12-22
Varian	ePeerReview	All		Affected	link			cisagov	2021-12-22
Varian	Ethos			Not Affected	link			cisagov	2021-12-22
Varian	FullScale oncology IT solutions	All		Affected	link			cisagov	2021-12-22
Varian	Halcyon system	All		Affected	link			cisagov	2021-12-22
Varian	ICAP			Not Affected	link			cisagov	2021-12-22
Varian	Identify			Not Affected	link			cisagov	2021-12-22
Varian	Information Exchange Manager (IEM)			Not Affected	link			cisagov	2021-12-22
Varian	InSightive Analytics	All		Affected	link			cisagov	2021-12-22
Varian	Large Integrated Oncology Network (LION)			Not Affected	link			cisagov	2021-12-22
Varian	Mobius3D platform			Not Affected	link			cisagov	2021-12-22
Varian	PaaS			Not Affected	link			cisagov	2021-12-22
Varian	ProBeam			Not Affected	link			cisagov	2021-12-22
Varian	Qumulate			Not Affected	link			cisagov	2021-12-22
Varian	Real-time Position Management (RPM)			Not Affected	link			cisagov	2021-12-22
Varian	Respiratory Gating for Scanners (RGSC)			Not Affected	link			cisagov	2021-12-22
Varian	SmartConnect solution	All		Affected	link	See Knowledge Article: 000038850 on MyVarian		cisagov	2021-12-22
Varian	SmartConnect solution Policy Server	All		Affected	link	See Knowledge Articles: 000038831 and 000038832 on MyVarian		cisagov	2021-12-22
Varian	TrueBeam radiotherapy system			Not Affected	link			cisagov	2021-12-22
Varian	UNIQUE system	All		Affected	link			cisagov	2021-12-22
Varian	Varian Authentication and Identity Server (VAIS)			Not Affected	link			cisagov	2021-12-22
Varian	Varian Managed Services Cloud	All		Affected	link			cisagov	2021-12-22
Varian	Varian Mobile App			Not Affected	link			cisagov	2021-12-22
Varian	VariSeed			Not Affected	link			cisagov	2021-12-22
Varian	Velocity			Not Affected	link			cisagov	2021-12-22
Varian	VitalBeam radiotherapy system			Not Affected	link			cisagov	2021-12-22
Varian	Vitesse			Not Affected	link			cisagov	2021-12-22
Varian	XMediusFax for ARIA oncology information system for Medical Oncology	All		Affected	link			cisagov	2021-12-22
Varian	XMediusFax for ARIA oncology information system for Radiation Oncology	All		Affected	link			cisagov	2021-12-22
VArmour				Unknown	link			cisagov	2022-01-12
Varnish Software				Unknown	link			cisagov	2022-01-12
Varonis				Unknown	link			cisagov	2022-01-12
Veeam				Unknown	link			cisagov	2022-01-12
Venafi				Unknown	link			cisagov	2022-01-12
Veritas NetBackup				Unknown	link			cisagov	2022-01-12
Vertica				Unknown	link			cisagov	2022-01-12
Video Insight Inc.	Video Insight			Not Affected	link	Video Insight is a part of Panasonic I-Pro.		cisagov	2022-01-19
Viso Trust				Unknown	link			cisagov	2022-01-12
VMware	API Portal for VMware Tanzu	1.x		Affected	link			cisagov	2021-12-12
VMware	App Metrics	2.x		Affected	link			cisagov	2021-12-12
VMware	Healthwatch for Tanzu Application Service	2.x, 1.x		Affected	link			cisagov	2021-12-12
VMware	Single Sign-On for VMware Tanzu Application Service	1.x		Affected	link			cisagov	2021-12-12
VMware	Spring Cloud Gateway for Kubernetes	1.x		Affected	link			cisagov	2021-12-12
VMware	Spring Cloud Gateway for VMware Tanzu	1.x		Affected	link			cisagov	2021-12-12
VMware	Spring Cloud Services for VMware Tanzu	3.x		Affected	link			cisagov	2021-12-12
VMware	vCenter Server - OVA	7.x, 6.7.x, 6.5.x		Affected	link	Workaround @ KB87081 (vmware.com)		cisagov	2021-12-17
VMware	vCenter Server - Windows	6.7.x, 6.5.x		Affected	link	Workaround @ KB87096 (vmware.com)		cisagov	2021-12-17
VMware	VMware Carbon Black Cloud Workload Appliance	1.x		Affected	link			cisagov	2021-12-12
VMware	VMware Carbon Black EDR Server	7.x, 6.x		Affected	link			cisagov	2021-12-12
VMware	VMware Cloud Foundation	4.x, 3.x		Affected	link			cisagov	2021-12-12
VMware	VMware HCX	4.x, 3.x		Affected	link			cisagov	2021-12-12
VMware	VMware Horizon	8.x, 7.x		Affected	link		VMware KB 87073 (vmware.com)	cisagov	2021-12-17
VMware	VMware Horizon Cloud Connector	1.x, 2.x		Affected	link			cisagov	2021-12-12
VMware	VMware Horizon DaaS	9.1.x, 9.0.x		Affected	link			cisagov	2021-12-12
VMware	VMware Identity Manager	3.3.x		Affected	link			cisagov	2021-12-12
VMware	VMware NSX-T Data Centern	3.x, 2.x		Affected	link			cisagov	2021-12-12
VMware	VMware Site Recovery Manager	8.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu Application Service for VMs	2.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu GemFire	9.x, 8.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu Greenplum	6.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu Kubernetes Grid Integrated Edition	1.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu Observability by Wavefront Nozzle	3.x, 2.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu Operations Manager	2.x		Affected	link			cisagov	2021-12-12
VMware	VMware Tanzu SQL with MySQL for VMs	2.x, 1.x		Affected	link			cisagov	2021-12-12
VMware	VMware Telco Cloud Automation	2.x, 1.x		Affected	link			cisagov	2021-12-12
VMware	VMware Unified Access Gateway	21.x, 20.x, 3.x		Affected	link			cisagov	2021-12-12
VMware	VMware vCenter Cloud Gateway	1.x		Affected	link			cisagov	2021-12-12
VMware	VMware vRealize Automation	8.x, 7.x		Affected	link			cisagov	2021-12-12
VMware	VMware vRealize Lifecycle Manager	8.x		Affected	link			cisagov	2021-12-12
VMware	VMware vRealize Log Insight	8.x		Affected	link			cisagov	2021-12-12
VMware	VMware vRealize Operations	8.x		Affected	link			cisagov	2021-12-12
VMware	VMware vRealize Operations Cloud Proxy	Any		Affected	link			cisagov	2021-12-12
VMware	VMware vRealize Orchestrator	8.x, 7.x		Affected	link			cisagov	2021-12-12
VMware	VMware Workspace ONE Access	21.x, 20.10.x		Affected	link			cisagov	2021-12-12
VMware	VMware Workspace ONE Access Connector (VMware Identity Manager Connector)	21.x, 20.10.x, 19.03.0.1		Affected	link			cisagov	2021-12-12
VTScada	All			Not Affected	link	Java is not utilized within VTScada software, and thus our users are unaffected.		cisagov	2022-01-17
Vyaire				Unknown	link			cisagov	2021-12-22
WAGO	WAGO Smart Script		4.2.x < 4.8.1.3	Fixed	link			cisagov	2021-12-17
Wallarm	All			Unknown	link			cisagov	2022-01-12
Wasp Barcode technologies	All			Unknown	link			cisagov	2022-01-12
Watcher	All			Not Affected	link			cisagov	2022-01-12
WatchGuard	AuthPoint		Cloud	Fixed	link			cisagov	2022-01-12
WatchGuard	Dimension			Not Affected	link			cisagov	2022-01-12
WatchGuard	EDPR and Panda AD360			Not Affected	link			cisagov	2022-01-12
WatchGuard	Firebox			Not Affected	link			cisagov	2022-01-12
WatchGuard	System Manager, Dimension, and Panda AD360			Not Affected	link			cisagov	2022-01-12
WatchGuard	Threat Detection and Response		Cloud	Fixed	link			cisagov	2022-01-12
WatchGuard	Wi-Fi Cloud		Cloud	Fixed	link			cisagov	2022-01-12
Western Digital				Unknown	link			cisagov	2022-01-12
WIBU Systems	CodeMeter Cloud Lite		2.2 and prior	Fixed	link			cisagov	2021-12-22
WIBU Systems	CodeMeter Keyring for TIA Portal		1.30 and prior	Fixed	link	Only the Password Manager is affected		cisagov	2021-12-22
WildFly	All			Not Affected	link			cisagov	2022-01-21
Wind River	LTS17			Not Affected	link			cisagov	2022-01-21
Wind River	LTS18			Not Affected	link			cisagov	2022-01-21
Wind River	LTS19			Not Affected	link			cisagov	2022-01-21
Wind River	LTS21			Not Affected	link			cisagov	2022-01-12
Wind River	WRL-6			Not Affected	link	The Wind River Linux Product Versions 8.0 and prior contains the log4j1.2 and JMSAppender components, however, JMSAppender is deactivated in the release package and not affected by CVE-2021-4104 customers are advised to NOT manually activate the JMSAppender component.		cisagov	2022-01-21
Wind River	WRL-7			Not Affected	link	The Wind River Linux Product Versions 8.0 and prior contains the log4j1.2 and JMSAppender components, however, JMSAppender is deactivated in the release package and not affected by CVE-2021-4104 customers are advised to NOT manually activate the JMSAppender component.		cisagov	2022-01-21
Wind River	WRL-8			Not Affected	link	The Wind River Linux Product Versions 8.0 and prior contains the log4j1.2 and JMSAppender components, however, JMSAppender is deactivated in the release package and not affected by CVE-2021-4104 customers are advised to NOT manually activate the JMSAppender component.		cisagov	2022-01-21
Wind River	WRL-9			Not Affected	link			cisagov	2022-01-21
WireShark	All			Not Affected	link			cisagov	2021-12-15
Wistia	All			Unknown	link			cisagov	2022-01-12
WitFoo	Precinct		6.x	Fixed	link	WitFoo Streamer & Apache Kafka Docker containers are/were vulnerable. See advisory.		cisagov	2022-01-12
WordPress	All			Not Affected	link			cisagov	2022-01-12
Worksphere	All			Unknown	link			cisagov	2022-01-12
Wowza	Streaming Engine		4.7.8, 4.8.x	Fixed	link			cisagov	2022-01-12
WSO2	API Manager		>= 3.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	API Manager Analytics		>= 2.6.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Enterprise Integrator		>= 6.1.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Enterprise Integrator Analytics		>= 6.6.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Identity Server		>= 5.9.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Identity Server Analytics		>= 5.7.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Identity Server as Key Manager		>= 5.9.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Micro Gateway		>= 3.2.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Micro Integrator		>= 1.1.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Micro Integrator Dashboard		>= 4.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Micro Integrator Monitoring Dashboard		>= 1.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Open Banking AM		>= 2.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Open Banking BI		>= 1.3.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Open Banking KM		>= 2.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Stream Integrator		>= 1.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Stream Integrator Tooling		>= 1.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
WSO2	Stream Processor		>= 4.0.0	Fixed	link	A temporary mitigation is available while vendor works on update.		cisagov	2022-01-26
XCP-ng				Unknown	link			cisagov	2022-01-12
XenForo				Unknown	link			cisagov	2022-01-12
Xerox				Unknown	link			cisagov	2022-01-12
XPertDoc				Unknown	link			cisagov	2022-01-12
XPLG				Unknown	link			cisagov	2022-01-12
XWIKI				Unknown	link			cisagov	2022-01-12
Xylem	Aquatalk			Unknown	link			cisagov	2021-12-22
Xylem	Avensor			Unknown	link			cisagov	2021-12-22
Xylem	Configuration change complete			Unknown	link			cisagov	2021-12-22
Xylem	Sensus Analytics			Unknown	link			cisagov	2021-12-22
Xylem	Sensus Automation Control Configuration change complete			Unknown	link			cisagov	2021-12-22
Xylem	Sensus Cathodic Protection Mitigation in process Mitigation in process			Unknown	link			cisagov	2021-12-22
Xylem	Sensus FieldLogic LogServer			Unknown	link			cisagov	2021-12-22
Xylem	Sensus Lighting Control			Unknown	link			cisagov	2021-12-22
Xylem	Sensus NetMetrics Configuration change complete			Unknown	link			cisagov	2021-12-22
Xylem	Sensus RNI On Prem	4.7 through 4.10, 4.4 through 4.6, 4.2		Affected	link			cisagov	2021-12-22
Xylem	Sensus RNI Saas	4.7 through 4.10, 4.4 through 4.6, 4.2		Affected	link			cisagov	2021-12-22
Xylem	Sensus SCS			Unknown	link			cisagov	2021-12-22
Xylem	Smart Irrigation			Unknown	link			cisagov	2021-12-22
Xylem	Water Loss Management (Visenti)			Unknown	link			cisagov	2021-12-22
Xylem	Xylem Cloud			Unknown	link			cisagov	2021-12-22
Xylem	Xylem Edge Gateway (xGW)			Unknown	link			cisagov	2021-12-22
Yahoo	Vespa			Not Affected	link	Your Vespa application may still be affected if log4j is included in your application package.		cisagov	2022-01-12
Yellowbrick				Unknown	link			cisagov	2022-01-12
YellowFin	All		8.0.10.3, 9.7.0.2	Fixed	link	v7 and v6 releases are not affected unless you have manually upgraded to Log4j2.		cisagov	2022-01-12
Yenlo	Connext			Not Affected	link	Connext Platform (Managed WSO2 Cloud) and all underlying middleware components are not vulnerable.		cisagov	2022-01-12
YOKOGAWA	CENTUM VP			Unknown	link	Unified Gateway Station (UGS2) Standard Function R6.06.00 or earlier.		cisagov	2021-12-22
YOKOGAWA	CENTUM VP (other components)			Not Affected	link	Unified Gateway Station (UGS2) Standard Function R6.06.00 or earlier is still under investigation.		cisagov	2021-12-22
YOKOGAWA	CI Server			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	Exaopc			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	Exaplog			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	Exaquantum			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	FAST/TOOLS			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	PRM			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	ProSafe-RS			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	ProSafe-RS Lite			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	STARDOM			Not Affected	link			cisagov	2021-12-22
YOKOGAWA	VTSPortal			Not Affected	link			cisagov	2021-12-22
YSoft	SAFEQ 4			Not Affected	link			cisagov	2022-02-01
YSoft	SAFEQ 5			Not Affected	link			cisagov	2022-02-01
YSoft	SAFEQ 6		<=6.0.63	Fixed	link			cisagov	2022-02-01
Zabbix				Unknown	link			cisagov	2022-01-12
ZAMMAD				Unknown	link			cisagov	2022-01-12
Zaproxy				Unknown	link			cisagov	2022-01-12
Zebra				Unknown	link			cisagov	2022-01-12
Zeiss	Cataract Suite		1.3.1	Fixed	link	Patch is available.		cisagov	2021-02-01
Zeiss	EQ Workplace		1.6, 1.8	Fixed	link	Patch is available.		cisagov	2021-02-01
Zeiss	FORUM		4.2.x	Fixed	link	Patch is available.		cisagov	2021-02-01
Zeiss	Glaucoma Workplace		3.5.x	Fixed	link	Patch is available.		cisagov	2021-02-01
Zeiss	Laser Treatment Workplace		1.x	Fixed	link	Patch is available.		cisagov	2021-02-01
Zeiss	Retina Workplace		2.5.x, 2.6.x	Fixed	link	Patch is available.		cisagov	2021-02-01
Zendesk	All Products	All Versions		Affected	link	Zendesk products are all cloud-based; thus there are no updates for the customers to install as the company is working on patching their infrastructure and systems.		cisagov	2021-12-13
Zenoss				Unknown	link			cisagov	2022-01-12
Zentera Systems, Inc.	CoIP Access Platform			Not Affected	link			cisagov	2021-12-17
Zerto	Cloud Appliance			Not Affected	link			cisagov	2021-02-01
Zerto	Cloud Manager			Not Affected	link			cisagov	2021-02-01
Zerto	Virtual Manager			Not Affected	link			cisagov	2021-02-01
Zerto	Virtual Replication Appliance			Not Affected	link			cisagov	2021-02-01
Zesty				Unknown	link			cisagov	2022-01-12
Zimbra				Unknown	link			cisagov	2022-01-12
Zix				Unknown	link			cisagov	2021-12-16
Zoho	Online			Unknown	link			cisagov	2021-02-01
Zoom				Not Affected	link			cisagov	2022-01-12
ZPE systems Inc				Unknown	link			cisagov	2022-01-12
Zscaler	See Link (Multiple Products)			Unknown	link			cisagov	2021-12-15
Zyxel				Unknown	link			cisagov	2022-01-12
Zyxel	All other products			Not Affected	link			cisagov	2021-12-14
Zyxel	Netlas Element Management System (EMS)			Affected	link	Hotfix availibility Dec. 20 2021. Patch availability in end of Feb. 2022.		cisagov	2021-12-14
Zyxel	Security Firewall/Gateways			Not Affected	link			cisagov	2021-12-14

828 KiB Raw Blame History Unescape Escape

CISA Log4j (CVE-2021-44228) Affected Vendor & Software List

Status Descriptions

Software List

828 KiB

Raw Blame History