Product by Apache Software Foundation

    Apache log4net

    9 known vulnerabilities in Apache log4net (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache log4net (Apache Software Foundation)
    CriticalCVE-2018-1285

    Apache log4net: XML External Entity (XXE)

    also in 6 other products

    		9.8
    MediumCVE-2026-105244

    Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

    also in 1 other product

    		5.3
    MediumCVE-2026-105242

    Apache log4net: Request validation failure drops the event in the aspnet-request converter

    also in 1 other product

    		5.3
    MediumCVE-2026-105239

    Apache log4net: NUL character truncates EventLogAppender records

    also in 1 other product

    		5.3
    MediumCVE-2026-105241

    Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

    also in 1 other product

    		5.3
    MediumCVE-2026-105243

    Apache log4net: Oversize EventLogAppender record silently discarded

    also in 1 other product

    		5.3
    MediumCVE-2026-105240

    Apache log4net: NUL character truncates OutputDebugStringAppender records

    also in 1 other product

    		5.3
    MediumCVE-2026-40021

    Apache Log4net: Improper Encoding or Escaping of Output

    also in 1 other product

    		5.3
    Not ratedCVE-2006-0743

    Apache log4net: Format String

    		—

    All products by Apache Software Foundation