Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Log4cxx

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2025-54812

    Apache Log4cxx: Improper HTML escaping in HTMLLayout

    Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoreticall…

    Apache Software Foundation Apache Log4cxx log4cxx log4cxx Debian Ubuntu