Skip to content

Vulnerabilities of Apache Software Foundation Apache Log4cxx

Is your version affected?

CVE Summary Score Published
CVE-2026-40023 Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions… 6.3 Medium Apr 10, 2026
CVE-2025-54812 Improper Output Neutralization for Logs vulnerability in Apache Log4cxx 2.1 Low Aug 22, 2025
CVE-2025-54813 Improper Output Neutralization for Logs vulnerability in Apache Log4cxx 6.3 Medium Aug 22, 2025
CVE-2023-31038 SQL injection in Log4cxx when using the ODBC appender to send log messages to a database.  No fields sent to the… Not rated May 8, 2023

Other Apache Software Foundation products