title: Red Hat Security Advisory: rh-maven36-log4j12 security update
description: log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer
cpes: cpe:/a:redhat:rhel_software_collections:3::el7