28 matches found
Security Bulletin: Vulnerability in Apache Log4j Core shipped in Tivoli Netcool/OMNIbus (CVE-2026-49844)
Summary The Netcool/Omnibus 'Administrator GUI' and 'Accelerated Event Notification GUI' desktop components use a version of Apache Log4j that contains a known vulnerability. This has been addressed. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite...
CLEANSTART-2026-AT67837 Socket Appender in Apache Log4j Core versions 2
Security vulnerability affects the apache-hive package. The Socket Appender in Apache Log4j Core versions 2...
CLEANSTART-2026-CP64029 Apache Log4j Core's Rfc5424Layout https://logging
Security vulnerability affects the wso2am package. Apache Log4j Core's Rfc5424Layout https://logging...
CLEANSTART-2026-JH04977 Apache Log4j Core's XmlLayout https://logging
Security vulnerability affects the wso2am package. Apache Log4j Core's XmlLayout https://logging...
CLEANSTART-2026-DZ37385 Apache Log4j Core's Rfc5424Layout https://logging
Security vulnerability affects the sonarqube package. Apache Log4j Core's Rfc5424Layout https://logging...
CLEANSTART-2026-BH90179 Apache Log4j Core's XmlLayout https://logging
Security vulnerability affects the sonarqube package. Apache Log4j Core's XmlLayout https://logging...
CLEANSTART-2026-FS24569 Socket Appender in Apache Log4j Core versions 2
Security vulnerability affects the sonarqube package. The Socket Appender in Apache Log4j Core versions 2...
Security Bulletin: Vulnerabilities in Netty,Apache Log4j Core,Spring Boot,Spring Framework,PostCSS,tmp,Spring Data,Apache Commons Lang,React Router,Bootstrap,d3-color might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Apache Log4j Core, Spring Boot, Spring Framework, PostCSS, tmp, Spring Data, Apache Commons Lang, React Router, Bootstrap,d3-color. Vulnerabilities include The attacker can present a server certificate...
CLEANSTART-2026-GM49347 Apache Log4j Core's XmlLayout https://logging
Security vulnerability affects the spark-sc212-jdk17-py311 package. Apache Log4j Core's XmlLayout https://logging...
CLEANSTART-2026-GW86512 Apache Log4j Core's Rfc5424Layout https://logging
Security vulnerability affects the spark-sc212-jdk17-py311 package. Apache Log4j Core's Rfc5424Layout https://logging...
PT-2026-108415
Security vulnerability affects the spark-sc212-jdk17-py311 package. Apache Log4j Core's Rfc5424Layout https://logging...
Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters
CVE-2026-34480 Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.htmlXmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/charsets producing invalid XML output whenever a l...
CLEANSTART-2026-YP50898 Apache Log4j Core's XmlLayout https://logging
Multiple security vulnerabilities affect the wso2is package. Apache Log4j Core's XmlLayout https://logging. See references for individual vulnerability details...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging
A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messages into XML, does not properly remove or replace characters that are not allowed in XML 1.0. When log messages or diagnostic information contain these forbidden characters, the resulting XML outpu...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging
A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messages into XML, does not properly remove or replace characters that are not allowed in XML 1.0. When log messages or diagnostic information contain these forbidden characters, the resulting XML outpu...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames
A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verification only when enabled v...
ROS-20260813-73-0050
The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging
A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messages into XML, does not properly remove or replace characters that are not allowed in XML 1.0. When log messages or diagnostic information contain these forbidden characters, the resulting XML outpu...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames
A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...