Advisories · Technology

Apache Software Foundation Apache Log4cxx.

Every CVE that names Apache Software Foundation Apache Log4cxx among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40023 CVE record

CVSS 6.3 Medium

Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters
- Apache Software Foundation Apache Log4cxx
- Apache Software Foundation Apache Log4cxx (Conan)
- CWE-116
Not analysed yet 10 Apr 2026
CVE-2025-54812 CVE record

CVSS 2.1 Low

Apache Log4cxx: Improper HTML escaping in HTMLLayout
- Apache Software Foundation Apache Log4cxx
- Other injection
Not analysed yet 22 Aug 2025
CVE-2025-54813 CVE record

CVSS 6.3 Medium

Apache Log4cxx: Improper escaping with JSONLayout
- Apache Software Foundation Apache Log4cxx
- Other injection
Not analysed yet 22 Aug 2025
CVE-2023-31038 CVE record

CVSS 8.8 High

Apache Log4cxx: SQL injection when using ODBC appender
- Apache Software Foundation Apache Log4cxx
- SQL injection
Not analysed yet 8 May 2023