[{"CVE":"CVE-2020-9488","severity":"low","public_date":"2020-04-25T00:00:00Z","advisories":["RHSA-2020:3817","RHSA-2020:2391","RHSA-2020:3779","RHSA-2020:3626"],"bugzilla":"1831139","bugzilla_description":"CVE-2020-9488 log4j: improper validation of certificate with host mismatch in SMTP appender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]