CVE vulnerability lookup by ID (CVE-2021-44228): the description, CVSS score and...
https://agent-data-tools.revmesh2074.workers.dev/cve/lookupOverview
CVE vulnerability lookup by ID (CVE-2021-44228): the description, CVSS score and severity, whether CISA lists it as exploited in the wild (KEV) and since when, the EPSS probability of exploitation in the next 30 days, the weakness (CWE), affected products with fixed versions, and patch and advisory links. Use to triage a security alert, decide what to patch first, or check an advisory before upgrading a dependency.
Protocol
x402
Price
$0.0020
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
uncategorized
Provider
CVE vulnerability lookup
Source
bazaar
Indexed
2026-11-11 00:08:34
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"method": "GET",
"queryParams": {
"cve": "CVE-2021-44228"
},
"type": "http"
}
Output Schema
{
"example": {
"affected": [
{
"product": "Apache Log4j2",
"vendor": "Apache Software Foundation",
"versions": [
{
"fixedIn": [
"2.3.1",
"2.12.2",
"2.15.0"
],
"range": "from 2.0-beta9 before log4j-core*"
}
]
}
],
"affectedTotal": 1,
"assigner": "apache",
"checkedAt": "2026-11-10T20:40:00.000Z",
"cveOrg": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
"cvss": {
"score": 10,
"scoredBy": "CISA",
"severity": "CRITICAL",
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. …",
"epss": {
"date": "2026-11-10",
"percentile": 1,
"probability": 0.99999
},
"id": "CVE-2021-44228",
"knownExploited": {
"catalog": "CISA KEV",
"dateAdded": "2021-12-10",
"listed": true
},
"nvd": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228",
"published": "2021-12-10",
"references": [
{
"tags": [],
"url": "https://logging.apache.org/log4j/2.x/security.html"
}
],
"referencesTotal": 54,
"source": "CVE Program record (cve.org), CISA Vulnrichment and KEV, FIRST EPSS",
"ssvc": {
"automatable": "yes",
"exploitation": "active",
"technicalImpact": "total"
},
"state": "PUBLISHED",
"title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints",
"updated": "2025-10-21",
"weaknesses": [
{
"cwe": "CWE-502",
"name": "Deserialization of Untrusted Data"
}
]
},
"type": "json"
}