Apache Log4cxx (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-08-22. Vendor: Apache Software Foundation.

CVEs of Apache Log4cxx

• CVE-2025-54813 - CVSS 7.5 (high), 2025-08-22: Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an…
• CVE-2025-54812 - CVSS 5.4 (medium), 2025-08-22: Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the…
• CVE-2023-31038 - CVSS 8.8 (high), 2023-05-08: SQL injection in Log4cxx when using the ODBC appender to send log messages to a database.  No fields sent to the database were properly escaped for SQL…