Glossary: Threats, Threat Actors and Motivations

Log4j

Also written: Log4j2, Apache Log4j

A widely used Java logging library that is built into thousands of programs. Its 2021 flaw, CVE-2021-44228, scored CVSS 10.0 Critical and is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, so it is a common example of a severe, actively exploited vulnerability.