AL
Product
Apache Log4net
by Apache Software Foundation · last CVE Oct 6, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 1High 0Medium 7Low 0
Watch

Add Apache Log4net to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1285
9.8
18%
May 11
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files
Affected: before 2.0.10
Showing 1