What’s Vulnerable › Products

Apache Software Foundation Apache Log4cxx vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Apache Software Foundation Apache Log4cxx version is affected

Latest Apache Software Foundation Apache Log4cxx vulnerabilities

• CVE-2026-40023 — Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters (CVSS 5.3)
• CVE-2025-54813 — Apache Log4cxx: Improper escaping with JSONLayout (CVSS 7.5)
• CVE-2025-54812 — Apache Log4cxx: Improper HTML escaping in HTMLLayout (CVSS 5.4)
• CVE-2023-31038 — Apache Log4cxx: SQL injection when using ODBC appender (CVSS 8.8)