Intrusion PreventionApache.log4net.Configuration.Files.CVE-2018-1285.XXE
Description
This indicates an attack attempt to exploit an External Entity Injection Vulnerability (XXE) in Apache log4net.
A remote authenticated attacker could exploit this vulnerability by sending malicious XML data to the target server. Successful exploitation could result in arbitrary code within the context of the application.
Affected Products
Apache log4net prior to 2.0.10
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread/mdhk96gcgh35fhgs5nh7j767n669jf9c
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 58083 |
| Created | May 26, 2025 |
| Updated | Jun 11, 2025 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 49.02% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Apache |
| Profile Type | Permission/Privilege/Access Control |