Lucene search
Veracode Vulnerability DatabaseVERACODE:40478HistoryMay 11, 2023 - 10:20 a.m.
SQL Injection
2023-05-1110:20:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
sql injection
liblog4cxx.so
odbc
vulnerability
database
0.001 Low
EPSS
Percentile
48.2%
liblog4cxx.so is vulnerable to SQL Injection. The vulnerability exists when using the ODBC appender to send log messages to a database because the fields are not properly escaped which allows an attacker to inject and execute arbitrary SQL queries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| liblog4cxx.so | le | 12.1.0 | |
| liblog4cxx.so | le | 12.1.0 |
Related
ubuntucve
ubuntucve
CVE-2023-31038
2023-05-08 00:00:00
cvelist
cvelist
CVE-2023-31038 Apache Log4cxx: SQL injection when using ODBC appender
2023-05-08 08:54:10
cve
cve
CVE-2023-31038
2023-05-08 09:15:09
redhatcve
redhatcve
CVE-2023-31038
2023-05-10 06:20:23
nvd
nvd
CVE-2023-31038
2023-05-08 09:15:09
osv
osv
CVE-2023-31038
2023-05-08 09:15:09
prion
prion
Sql injection
2023-05-08 09:15:00
debiancve
debiancve
CVE-2023-31038
2023-05-08 09:15:09