Vendor/product archive

apache / log4net CVEs

Beta · best-effort

3 CVEs tagged to apache / log4net — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2026-40021

Published Apr 10, 2026

Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/c…

CVSS 6.3 · Medium

evidence mentions: 6
Buzz score: 32.5

Vendor/product tagsBeta · best-effort

CVE-2018-1285

Published May 11, 2020

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2006-0743

Published Mar 9, 2006

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknow…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1