Apache Log4net
Do you want an email whenever new security vulnerabilities are reported in Apache Log4net?
By the Year
In 2024 there have been 0 vulnerabilities in Apache Log4net . Log4net did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 1 | 9.80 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Log4net vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apache Log4net Security Vulnerabilities
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files
CVE-2018-1285
9.8 - Critical
- May 11, 2020
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
XXE
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for NetApp Manageability Software Development Kit or by Apache? Click the Watch button to subscribe.
