Known vulnerabilities in logback

Vendor: SUSE
Software: logback
Software CPE: cpe:2.3:o:suse:logback:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting logback logback is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123671 - Improper input validation
CVE-2026-1225		 CWE-20 Low
No
No
 1.2.13-150200.3.16.1 10.03.2026 SB2026031035
SB2026031036
SB2026031041
and 6 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 1.2.13-150200.3.13.1 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 1.2.11-150200.3.10.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 1.2.11-150200.3.10.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more