请通过Issue提交公告 / 不接受PR。
https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592
本列表包含所有公司的公告,即使他们仅确认未使用log4j。
| 是 |
| N-Able | https://www.n-able.com/security-and-privacy/apache-log4j-vulnerability | 可能 |
| NetApp | https://security.netapp.com/advisory/ntap-20211210-0007/ | 是,但尚无可用方案 |
| NSA Ghidra | https://github.com/NationalSecurityAgency/ghidra#warning | 是 |
| Paloalto Networks | https://security.paloaltonetworks.com/CVE-2021-44228 | 否 |
| PulseSecure | https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44933/ | 否 |
| Red Hat | https://access.redhat.com/security/vulnerabilities/RHSB-2021-009?sc_cid=701f2000000tyBjAAI | 是 |
| SalesForce | https://help.salesforce.com/s/articleView?id=000363736&type=1 | 稍后查看,目前正在调查 |
| SonarQube | https://community.sonarsource.com/t/sonarqube-and-the-log4j-vulnerability/54721 | 稍后查看,目前正在调查 |
| Sonatype | https://blog.sonatype.com/a-new-0-day-log4j-vulnerability-discovered-in-the-wild | 稍后查看,目前正在调查 |
| Sophos | https://www.sophos.com/en-us/security-advisories/sophos-sa-20211210-log4j-rce | 否 |
| VMware | https://www.vmware.com/security/advisories/VMSA-2021-0028.html | 是 |