CVE-2020-9488

mediumpriority · track · 28EPSS 0.082 · 95 %ileexploit · PoCDEEUFRRUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

8.22% (95th) EPSS

CVSS 4.3 · medium

Is it mine?

263 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

cvss

Technical severity, 0–10. One row per scoring source.

4.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.5–4.3

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.13.7lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 1.4

v3.13.7lowAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.13.7lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.13.7lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondaryexploitability 2.2 · impact 1.4

v3.13.7lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · OSV

v3.13.5lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-295USprimaryCWE-295USCWE-295USCWE-297US

exploits (1)

Public proof-of-concept and weaponised exploit code.

arsalanraja987/java-log4j-cve-2020-9488Demo of CVE-2020-9488: Unsafe logging with Log4j and remediationPoC · poc_in_github

affected products (263)

Products and version ranges known to be affected.

Dell ECS <3.8.1.0all versionscert_bundDE
Dell PowerEdgeall versionscert_bundDEcpe:/h:dell:poweredge:-
IBM InfoSphere Information Serverall versionscert_bundDEcpe:/a:ibm:infosphere_information_server:-
Dell ECS< 3.8.1.0cert_bundDE
Apache Apache Log4j≤ log4j-core 2.13.0enisa_euvdEU
Apache Apache Log4jlog4j-core → 2.12.3enisa_euvdEU
Apache Software Foundation Log4j≤ 2.13.2fstec_bduRU
Cisco Systems Inc. Hyperion Infrastructure Technology≤ 11.1.2.4fstec_bduRU
Oracle Corp. Agile Engineering Data Management≤ 6.2.1fstec_bduRU
Oracle Corp. Application Testing Suite≤ 13.3.0.1fstec_bduRU
Oracle Corp. Banking Platform≤ 2.4.0-2.10.0fstec_bduRU
Oracle Corp. Category Management Planning & Optimization≤ 15.0.3fstec_bduRU
Oracle Corp. Communications Application Session Controller≤ 3.9m0p1fstec_bduRU
Oracle Corp. Communications Billing and Revenue Management≤ 12.0.0.3.0fstec_bduRU
Oracle Corp. Communications Billing and Revenue Management≤ 7.5.0.23.0fstec_bduRU
Oracle Corp. Communications Instant Messaging Server≤ 10.0.1.4.0fstec_bduRU
Oracle Corp. Communications MetaSolv Solution≤ 6.3.0fstec_bduRU
Oracle Corp. Communications Network Charging and Control≤ 6.0.1fstec_bduRU
Oracle Corp. Communications Network Charging and Control12.0.0 → 12.0.3fstec_bduRU
Oracle Corp. Enterprise Manager Ops Center≤ 12.4.0.0fstec_bduRU

showing 20 of 263

advisories (5)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-1048Oracle Construction and Engineering: Mehrere SchwachstellenDeutsch2020-10-20csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
WID-SEC-W-2024-0794Dell ECS: Mehrere SchwachstellenDeutsch2024-04-04csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
WID-SEC-W-2024-2181Oracle Fusion Middleware: Mehrere SchwachstellenDeutsch2020-07-14csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
GHSA-vwqq-5vrc-xw9hImproper validation of certificate with host mismatch in Apache Log4j SMTP appender2020-06-05ghsa · osvUS
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender.
CERTFR-2026-AVI-1336Multiples vulnérabilités dans les produits IBMFrançais2026-10-16vendor · certfrFR

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund osv certfr NVD CVE.org MITRE

published 2020-04-27modified 2026-06-17

related (1,894)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-85102US	—OT critical	54.1% (99th)	KEV	2026-09-09
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the G…
CVE-2023-41991US	medium5.5OT critical	13.4% (96th)	KEV	2023-09-21
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple…
CVE-2023-20963US	high7.8OT critical	1.47% (74th)	KEV	2023-03-24
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	2022-05-10
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-20703US	high8.0OT critical	9.20% (95th)	KEV	2022-02-10
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate pr…

+1889 more

references (191)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan