Lucene search
F5F5:K48127735HistoryMay 20, 2022 - 2:30 a.m.
Apache log4net Vulnerability CVE-2018-1285
2022-05-2002:30:00
support.f5.com
81
0.009 Low
EPSS
Percentile
82.8%
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files. (CVE-2018-1285)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
cve
cve
CVE-2018-1285
2020-05-11 17:15:10
CVE-2021-44028
2021-12-22 06:15:06
openvas
openvas
Fedora: Security Advisory for log4net (FEDORA-2020-cfc319e067)
2020-05-29 00:00:00
Fedora: Security Advisory for log4net (FEDORA-2020-847775bf79)
2020-05-29 00:00:00
Fedora: Security Advisory for log4net (FEDORA-2020-73d380e9b9)
2020-05-29 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: log4net-2.0.8-10.fc31
2020-05-24 03:16:27
[SECURITY] Fedora 32 Update: log4net-2.0.8-10.fc32
2020-05-24 03:29:40
[SECURITY] Fedora 30 Update: log4net-2.0.8-10.fc30
2020-05-24 04:02:53
mageia
mageia
Updated log4net packages fix security vulnerability
2020-05-27 12:52:46
rosalinux
rosalinux
Advisory ROSA-SA-2023-2169
2023-06-20 10:11:17
osv
osv
log4net vulnerability
2021-01-19 12:50:54
log4net - security update
2020-05-15 00:00:00
XML External Entity attack in log4net
2021-01-29 19:47:23
cvelist
cvelist
CVE-2018-1285
2020-05-11 16:41:28
CVE-2021-44028
2021-12-22 05:03:39
nessus
nessus
Fedora 31 : log4net (2020-847775bf79)
2020-05-26 00:00:00
Fedora 30 : log4net (2020-cfc319e067)
2020-05-26 00:00:00
Oracle Application Testing Suite (Apr 2022 CPU)
2022-04-21 00:00:00
ubuntu
ubuntu
Apache Log4net vulnerability
2021-01-19 00:00:00
debiancve
debiancve
CVE-2018-1285
2020-05-11 17:15:10
ubuntucve
ubuntucve
CVE-2018-1285
2020-05-11 00:00:00
intel
intel
Intel® RST Advisory
2022-08-09 00:00:00
prion
prion
Cross site scripting
2020-05-11 17:15:00
Design/Logic Flaw
2021-12-22 06:15:00
hp
hp
nvd
nvd
CVE-2018-1285
2020-05-11 17:15:10
CVE-2021-44028
2021-12-22 06:15:06
veracode
veracode
XML External Entities (XXE)
2020-05-11 03:38:22
github
github
XML External Entity attack in log4net
2021-01-29 19:47:23
ics
ics
BD Alaris System with Guardrails Suite MX (Update A)
2023-10-26 12:00:00
kaspersky
kaspersky
KLA12437 Multiple vulnerabilities in Foxit PDF Reader
2022-01-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00