The vulnerability of the XmlLayout() function in the Apache Log4j Core library allows attackers to compromise the integrity of the protected information.

🗓️ 31 Jul 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

XmlLayout in Apache Log4j Core has improper encoding, enabling attackers to compromise integrity.

Reporter	Title	Published	Views	Family All 178
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j	31 Jul 202608:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses log4j-core-2.25.3.jar which is vulnerable to CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480	7 Jul 202613:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple log4j related security vulnerabilities in IBM Guardium Key Lifecycle Manager	13 Jul 202609:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Log4j	23 Jul 202615:54	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Apache Log4j	1 Jul 202605:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers July 2026	5 Aug 202607:34	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in log4j-core-2.25.3.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-34477, CVE-2026-34478, CVE-2026-34480)	29 May 202609:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in log4j v2.25.3.	23 Jun 202619:51	–	ibm

Vulners

Node

apache apache_log4j_coreRange3.0.0-alpha1–3.0.0-beta3

Source	Link
github	www.github.com/apache/logging-log4j2/pull/4077
logging	www.logging.apache.org/security.html
lists	www.lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb
web	www.web.nvd.nist.gov/view/vuln/detail

31 Jul 2026 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 37.5

CVSS 27.8

EPSS0.0086

apache logging library xml layout improper encoding remote exploitation data integrity