CVE-2021-45046Vulnerability
Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by Huntress · last reported
Last reported 3 years ago
CISA KEVAdded 1 May 2023
Fix due 22 May 2023
Used by ransomware: knownCISA KEV catalogue
Fix due 22 May 2023
Used by ransomware: knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 30 Sep 2026
higher than 99% of CVEsFIRST EPSS, as of 30 Sep 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Analysis of Log4Shell vulnerability & CVE-2021-45046“Analysis of Log4Shell vulnerability & CVE-2021-45046”
-
VMware Horizon Servers Actively Being Hit With Cobalt Strike“With that said, it’s entirely possible attackers exploited CVE-2021-44228 and CVE-2021-45046 to spread laterally within your network so you should proceed with caution.”
Indicators reported together
named in the same reports- digital.nhs[.]ukin 1 report
- hxxps://digital.nhs[.]uk/cyber-alerts/2022/cc-4002in 1 report
- hxxp://185.112.83[.]116:8080/drvin 1 report
- 185.112.83[.]116in 1 report
- hxxps://logging.apache[.]org/log4j/2.x/security.htmlin 1 report
- hxxps://www.lunasec[.]io/docs/blog/log4j-zero-day-severity-of-cve-2021-45046-increased/in 1 report
- www.lunasec[.]ioin 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2021-44228
Thanks — we review every report.