2483 matches found
MINI-MGWH-PV97-W83H
Bulletin has no description...
CLSA-2026-1787141079 TuxCare security update for log4j:log4j (1 CVE)
TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.16-tuxcare.2...
Vulnerabilities found in Oracle Financial Services
Oracle has identified vulnerabilities in various Financial Services Enterprise modules. These vulnerabilities exist in third-party products such as Apache Kafka, Log4j, and the Spring Framework. Updates have been released by the developers for these products. These updates are now integrated into...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by an Improper Serialization due to Apache Log4j JSON Template Layout
Summary Apache Log4j JSON Template Layout in Apache Solr is used by IBM Operations Analytics - Log Analysis as part of the encoding log events. CVE-2026-34481. Vulnerability Details CVEID:CVE-2026-34481 DESCRIPTION: Apache Log4j's JsonTemplateLayout...
Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099531 advisory. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...
Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...
MINI-5MPP-5QXG-QV2P
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2026-34480 CVE-2026-34480 in org.apache.logging.log4j:log4j-core - Patched by Root
Root has patched CVE-2026-34480 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-34478 CVE-2026-34478 in org.apache.logging.log4j:log4j-core - Patched by Root
Root has patched CVE-2026-34478 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-68161 CVE-2025-68161 in org.apache.logging.log4j:log4j-core - Patched by Root
Root has patched CVE-2025-68161 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...
ROS-20260813-73-0050
The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging
A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messages into XML, does not properly remove or replace characters that are not allowed in XML 1.0. When log messages or diagnostic information contain these forbidden characters, the resulting XML outpu...
org.apache.logging.log4j: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output
A flaw was found in Apache Log4j's JsonTemplateLayout. This vulnerability allows a remote attacker to disrupt log processing systems. By sending log events that include specific non-numeric floating-point values, the attacker can cause the JsonTemplateLayout to generate invalid JSON output. This...
Important: Red Hat Security Advisory: Streams for Apache Kafka 3.2.1 release and security update
Streams for Apache Kafka 3.2.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames
A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...
Security Bulletin:Vulnerability in Log4j affects IBM Netezza Appliance
Summary The Log4j package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-49844 Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API...
Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences
Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Log4j
Summary Multiple vulnerabilities in Apache Log4j that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verificati...