CISA Log4j (CVE-2021-44228) Affected Vendor & Software List

March 1, 2022 · View on GitHub

0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Status Descriptions

Status	Description
Unknown	Status unknown. Default choice.
Affected	Reported to be affected by CVE-2021-44228.
Not Affected	Reported to NOT be affected by CVE-2021-44228 and no further action necessary.
Fixed	Patch and/or mitigations available (see provided links).
Under Investigation	Vendor investigating status.

Software List

This list has been populated using information from the following sources:

Kevin Beaumont
SwitHak
National Cyber Security Centre - Netherlands (NCSC-NL)

NOTE: This file is automatically generated. To submit updates, please refer to CONTRIBUTING.md.

Vendor	Product	Affected Versions	Patched Versions	Status	Vendor Links	Notes	References	Reporter	Last Updated
N-able				Unknown	link			cisagov	2022-01-12
Nagios				Unknown	link			cisagov	2022-01-12
NAKIVO				Unknown	link			cisagov	2022-01-12
National Instruments	OptimalPlus	Vertica, Cloudera, Logstash		Affected	link	(Limited to deployments running Vertica, Cloudera, or Logstash) Contact Technical Support		cisagov	2022-01-05
Neo4j	Neo4j Graph Database	>4.2, <4..2.12		Affected				cisagov	2021-12-13
Netapp	Multiple NetApp products			Unknown	link			cisagov	2022-01-12
Netcup				Unknown	link			cisagov	2022-01-12
NetGate PFSense				Unknown	link			cisagov	2022-01-12
Netwrix				Unknown	link			cisagov	2022-01-12
New Relic	Containerized Private Minion (CPM)		3.0.57	Fixed	link	New Relic is in the process of revising guidance/documentation, however the fix version remains sufficient.	Security Bulletin NR21-04	cisagov	2021-12-18
New Relic	New Relic Java Agent	<7.4.3		Affected	link	Initially fixed in 7.4.2, but additional vulnerability found	New Relic tracking, covers CVE-2021-44228, CVE-2021-45046	cisagov	2021-12-20
NextCloud				Unknown	link			cisagov	2022-01-12
Nextflow	Nextflow			Not Affected	link			cisagov	2021-12-21
Nexus Group				Unknown	link			cisagov	2022-01-12
Nice Software (AWS) EnginFRAME				Unknown	link			cisagov	2022-01-12
NinjaRMM				Unknown	link	This advisory is available to customers only and has not been reviewed by CISA		cisagov	2022-01-12
Nomachine				Unknown	link			cisagov	2022-01-12
NoviFlow				Unknown	link			cisagov	2022-01-12
Nulab	Backlog		N/A (SaaS)	Fixed	link			cisagov	2022-01-12
Nulab	Backlog Enterprise (On-premises)		< 1.11.7	Fixed	link			cisagov	2022-01-12
Nulab	Cacoo		N/A (SaaS)	Fixed	link			cisagov	2022-01-12
Nulab	Cacoo Enterprise (On-premises)		< 4.0.4	Fixed	link			cisagov	2022-01-12
Nulab	Typetalk		N/A (SaaS)	Fixed	link			cisagov	2022-01-12
Nutanix	AHV			Not Affected	link			cisagov	2021-12-20
Nutanix	AOS			Not Affected	link			cisagov	2021-12-20
Nutanix	AOS		STS (including Prism Element)	Fixed	link	Patched in 6.0.2.4, available on the Portal for download.		cisagov	2021-12-20
Nutanix	Beam			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	BeamGov			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Calm			Not Affected	link			cisagov	2021-12-20
Nutanix	Calm Tunnel VM			Not Affected	link			cisagov	2021-12-20
Nutanix	Collector			Not Affected	link			cisagov	2021-12-20
Nutanix	Collector Portal			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Data Lens			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Era			Not Affected	link			cisagov	2021-12-20
Nutanix	File Analytics	2.1.x, 2.2.x, 3.0+		Affected	link	Mitigated in version 3.0.1 which is available on the Portal for download. Mitigation is available here		cisagov	2021-12-20
Nutanix	Files			Not Affected	link			cisagov	2021-12-20
Nutanix	Flow			Not Affected	link			cisagov	2021-12-20
Nutanix	Flow Security Cental			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Foundation			Not Affected	link			cisagov	2021-12-20
Nutanix	Frame			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	FrameGov			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	FSCVM			Not Affected	link			cisagov	2021-12-20
Nutanix	Insights			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Karbon	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	Karbon Platform Service			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	LCM			Not Affected	link			cisagov	2021-12-20
Nutanix	Leap			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Mine	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	Move			Not Affected	link			cisagov	2021-12-20
Nutanix	MSP	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	NCC			Not Affected	link			cisagov	2021-12-20
Nutanix	NGT			Not Affected	link			cisagov	2021-12-20
Nutanix	Objects	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	Prism Central		All	Fixed	link	Patched in 2021-9.0.3, available on the Portal for download.		cisagov	2021-12-20
Nutanix	Sizer			Unknown	link	Saas-Based Procuct. See Advisory.		cisagov	2021-12-20
Nutanix	Volumes			Not Affected	link			cisagov	2021-12-20
Nutanix	Witness VM	All		Affected	link	Mitigation is available here		cisagov	2021-12-20
Nutanix	X-Ray			Not Affected	link			cisagov	2021-12-20
Nvidia				Unknown	link			cisagov	2022-01-12
NXLog				Unknown	link			cisagov	2022-01-12