Gabriel Gabor

Protection against CVE-2021-45046, the additional Log4j RCE vulnerability

12/15/2021

Log4J Log4Shell WAF Rules Security Vulnerabilities

This vulnerability is actively being exploited and anyone using Log4J should update to version 2.16.0 as soon as possible, even if you have previously updated to 2.15.0. The latest version can be found on the Log4J download page....

CVE-2021-44228 - Log4j RCE 0-day mitigation

12/10/2021

Vulnerabilities Zero Day Threats WAF Rules Security Log4J Log4Shell

A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE). This vulnerability is actively being exploited and anyone using Log4j should update to version 2.15.0 as soon as possible....

Protecting against recently disclosed Microsoft Exchange Server vulnerabilities: CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065

03/07/2021

Vulnerabilities WAF WAF Rules

Cloudflare has deployed managed rules protecting customers against a series of remotely exploitable vulnerabilities that were recently found in Microsoft Exchange Server. ...