GCVE-110-NCSC-2026-202

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published June 17, 2026

Apache Log4j's JsonTemplateLayout up to version 2.25.3 improperly serializes non-finite floating-point values, producing invalid JSON that can disrupt log processing, while Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have a critical vulnerability allowing unauthenticated data modification.

Download JSON Open in Console

Weaknesses (CWE)

CWE-116Improper Encoding or Escaping of Output

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2026-34481 CVE-2026-46832 CVE-2026-46852 CVE-2026-46853 CVE-2026-46854 CVE-2026-46855 CVE-2026-46856 CVE-2026-46857 CVE-2026-46858 CVE-2026-46864 CVE-2026-46865 CVE-2026-46866 CVE-2026-46867 CVE-2026-46868 CVE-2026-46872 CVE-2026-46875

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON