CVE

CVE-2017-5645

9.8

CVSS

Description

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

Attack Vector

Privileges Req.

User Interaction

apache log4j

Updated Sep 28, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2017-5645 Scanner

Detects 'Deserialization Command Execution' vulnerability in Apache Log4j Server affects v. before 2.8.2

Used 2.8k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: apache log4j

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →