CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2026/04/10 6:31 p.m.•24 views

Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.htmllayout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/configuration/layouts.htmllayout-list , in versions before 3.3.0, fail to sanitize characters forbidden by the XML 1.0...

6.3CVSS5.8AI score0.00981EPSS

SaveExploits0References8Affected Software1

OSV•added 2026/04/10 3:44 p.m.•15 views

CVE-2026-40021 Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

6.3CVSS5.8AI score

SaveExploits0References9

Rapid7 Vulnerability Database (full)•added 2026/04/10 12:00 a.m.•1 views

CVE-2026-40021: Improper Encoding or Escaping of Output

6.3CVSS5.8AI score0.00981EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by