Question: The log4net.dll installed with KAFC has been flagged as a security vulnerability. The installed version, log4net.dll , is affected by CVE-2018-1285.  Is there a fix for this?

Answer:  This vulnerability is resolved in Analytics for Capture version 2025.4. This release updates log4net to version 3.3, the latest version available at the time of release, which addresses the reported vulnerability.

This update also addresses this vulnerability in TAFC: LINK

You can find the release notes for Analytics for Capture 2025.4 here:

https://docshield.tungstenautomation.com/KAFC/en_US/2025.4-mmbztwz6vb/help/ReleaseNotes/AFC_releasenotes/2025.4/c_introduction_releasenotes.html

NOTE: This issue does not impact Insight. It is isolated to TAFC / KAFC only.