Improper Input Validation and Injection in Apache Log4j2 CVSS base score is 3.1 (MODERATE severity). The EPSS exploit prediction model gives this CVE a 53.6% probability of exploitation in the next 30 days, placing it in the 98th percentile of all tracked vulnerabilities. This vulnerability is not currently on the CISA Known Exploited Vulnerabilities catalog. Affects 7 packages across the dependency graph; review the affected version ranges below and upgrade to a fixed release where available.