mirror of
https://github.com/cisagov/log4j-affected-db.git
synced 2024-11-13 20:37:54 +00:00
22 KiB
22 KiB
CISA Log4j (CVE-2021-44228) Affected Vendor & Software List
0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Status Descriptions
| Status | Description |
|---|---|
| Unknown | Status unknown. Default choice. |
| Affected | Reported to be affected by CVE-2021-44228. |
| Not Affected | Reported to NOT be affected by CVE-2021-44228 and no further action necessary. |
| Fixed | Patch and/or mitigations available (see provided links). |
| Under Investigation | Vendor investigating status. |
Software List
This list has been populated using information from the following sources:
- Kevin Beaumont
- SwitHak
- National Cyber Security Centre - Netherlands (NCSC-NL)
NOTE: This file is automatically generated. To submit updates, please refer to
CONTRIBUTING.md.
| Vendor | Product | Affected Versions | Patched Versions | Status | Vendor Links | Notes | References | Reporter | Last Updated |
|---|---|---|---|---|---|---|---|---|---|
| Varian | Acuity | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | ARIA Connect (Cloverleaf) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | ARIA eDOC | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | ARIA oncology information system for Medical Oncology | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | ARIA oncology information system for Radiation Oncology | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | ARIA Radiation Therapy Management System (RTM) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Bravos Console | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Clinac | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | Cloud Planner | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | DITC | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | DoseLab | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Eclipse treatment planning software | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | ePeerReview | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | Ethos | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | FullScale oncology IT solutions | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | Halcyon system | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | ICAP | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Identify | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Information Exchange Manager (IEM) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | InSightive Analytics | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | Large Integrated Oncology Network (LION) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Mobius3D platform | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | PaaS | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | ProBeam | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Qumulate | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Real-time Position Management (RPM) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Respiratory Gating for Scanners (RGSC) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | SmartConnect solution | All | Affected | link | See Knowledge Article: 000038850 on MyVarian | cisagov | 2021-12-22 | ||
| Varian | SmartConnect solution Policy Server | All | Affected | link | See Knowledge Articles: 000038831 and 000038832 on MyVarian | cisagov | 2021-12-22 | ||
| Varian | TrueBeam radiotherapy system | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | UNIQUE system | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | Varian Authentication and Identity Server (VAIS) | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Varian Managed Services Cloud | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | Varian Mobile App | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | VariSeed | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Velocity | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | VitalBeam radiotherapy system | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | Vitesse | Not Affected | link | cisagov | 2021-12-22 | ||||
| Varian | XMediusFax for ARIA oncology information system for Medical Oncology | All | Affected | link | cisagov | 2021-12-22 | |||
| Varian | XMediusFax for ARIA oncology information system for Radiation Oncology | All | Affected | link | cisagov | 2021-12-22 | |||
| VArmour | Unknown | link | cisagov | 2022-01-12 | |||||
| Varnish Software | Unknown | link | cisagov | 2022-01-12 | |||||
| Varonis | Unknown | link | cisagov | 2022-01-12 | |||||
| Veeam | Unknown | link | cisagov | 2022-01-12 | |||||
| Venafi | Unknown | link | cisagov | 2022-01-12 | |||||
| Veritas NetBackup | Unknown | link | cisagov | 2022-01-12 | |||||
| Vertica | Unknown | link | cisagov | 2022-01-12 | |||||
| Video Insight Inc. | Video Insight | Not Affected | link | Video Insight is a part of Panasonic I-Pro. | cisagov | 2022-01-19 | |||
| Viso Trust | Unknown | link | cisagov | 2022-01-12 | |||||
| VMware | API Portal for VMware Tanzu | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | App Metrics | 2.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | Healthwatch for Tanzu Application Service | 2.x, 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | Single Sign-On for VMware Tanzu Application Service | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | Spring Cloud Gateway for Kubernetes | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | Spring Cloud Gateway for VMware Tanzu | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | Spring Cloud Services for VMware Tanzu | 3.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | vCenter Server - OVA | 7.x, 6.7.x, 6.5.x | Affected | link | Workaround @ KB87081 (vmware.com) | cisagov | 2021-12-17 | ||
| VMware | vCenter Server - Windows | 6.7.x, 6.5.x | Affected | link | Workaround @ KB87096 (vmware.com) | cisagov | 2021-12-17 | ||
| VMware | VMware Carbon Black Cloud Workload Appliance | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Carbon Black EDR Server | 7.x, 6.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Cloud Foundation | 4.x, 3.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware HCX | 4.x, 3.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Horizon | 8.x, 7.x | Affected | link | VMware KB 87073 (vmware.com) | cisagov | 2021-12-17 | ||
| VMware | VMware Horizon Cloud Connector | 1.x, 2.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Horizon DaaS | 9.1.x, 9.0.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Identity Manager | 3.3.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware NSX-T Data Centern | 3.x, 2.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Site Recovery Manager | 8.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu Application Service for VMs | 2.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu GemFire | 9.x, 8.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu Greenplum | 6.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu Kubernetes Grid Integrated Edition | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu Observability by Wavefront Nozzle | 3.x, 2.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu Operations Manager | 2.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Tanzu SQL with MySQL for VMs | 2.x, 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Telco Cloud Automation | 2.x, 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Unified Access Gateway | 21.x, 20.x, 3.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vCenter Cloud Gateway | 1.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vRealize Automation | 8.x, 7.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vRealize Lifecycle Manager | 8.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vRealize Log Insight | 8.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vRealize Operations | 8.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vRealize Operations Cloud Proxy | Any | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware vRealize Orchestrator | 8.x, 7.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Workspace ONE Access | 21.x, 20.10.x | Affected | link | cisagov | 2021-12-12 | |||
| VMware | VMware Workspace ONE Access Connector (VMware Identity Manager Connector) | 21.x, 20.10.x, 19.03.0.1 | Affected | link | cisagov | 2021-12-12 | |||
| VTScada | All | Not Affected | link | Java is not utilized within VTScada software, and thus our users are unaffected. | cisagov | 2022-01-17 | |||
| Vyaire | Unknown | link | cisagov | 2021-12-22 |