Skip to content
Noroxi

CWE-778 · 36 records

Insufficient Logging

CVEs in this class

36 records

  • CVE-2024-48967
    40Plan

    Life2000 ventilator and Service PC lack sufficient audit logging capabilities

    CriticalCVSS 10.0No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2026-76208
    35Monitor

    phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP

    HighCVSS 8.8No exploitEPSS 0%

    phpmyfaq · phpmyfaqAug 19, 2026

  • CVE-2026-82863
    34Monitor

    @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

    HighCVSS 8.7No exploitEPSS 0%

    hulumi · baselineAug 31, 2026

  • CVE-2025-52644
    32Monitor

    HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.

    HighCVSS 8.2No exploitEPSS 0%

    hcltech · aionMar 16, 2026

  • CVE-2019-7613
    30Monitor

    Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw.

    HighCVSS 7.5No exploitEPSS 1%

    elastic · winlogbeatMar 25, 2019

  • CVE-2021-43419
    30Monitor

    An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.

    HighCVSS 7.5No exploitEPSS 0%

    opayweb · opayNov 7, 2023

  • CVE-2022-30305
    30Monitor

    An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor

    HighCVSS 7.5No exploitEPSS 0%

    fortinet · fortideceptorDec 6, 2022

  • CVE-2023-1995
    30Monitor

    Insufficient Logging Vulnerability in HiRDB

    HighCVSS 7.5No exploitEPSS 0%

    hitachi · hirdb server with additional functionAug 28, 2023

  • CVE-2026-85959
    30Monitor

    Insufficient authentication logging in Progress MarkLogic Server

    HighCVSS 7.5No exploitEPSS 0%

    progress software corporation · marklogic serverOct 12, 2026

  • CVE-2026-22279
    30Monitor

    Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability.

    HighCVSS 7.5No exploitEPSS 0%

    dell · powerscale onefsJan 22, 2026

  • CVE-2020-37268
    27Monitor

    Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline

    MediumCVSS 6.8No exploitEPSS 0%

    rocq-prover · rocqAug 24, 2026

  • CVE-2019-19277
    26Monitor

    A vulnerability has been identified in SIPORT MP (All versions < 3.1.4).

    MediumCVSS 6.5No exploitEPSS 1%

    siemens · siport mpMar 10, 2020

  • CVE-2026-66816
    26Monitor

    Microsoft SQL Server Security Feature Bypass Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    microsoft · sql server 2022Sep 8, 2026

  • CVE-2026-25598
    25Monitor

    Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)

    MediumCVSS 6.3No exploitEPSS 0%

    stepsecurity · harden-runnerFeb 9, 2026

  • CVE-2026-105243
    21Monitor

    Apache log4net: Oversize EventLogAppender record silently discarded

    MediumCVSS 5.3No exploitEPSS 0%

    apache · log4netOct 6, 2026

  • CVE-2025-2562
    21Monitor

    Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored

    MediumCVSS 5.4No exploitEPSS 0%

    devolutions · remote desktop managerMar 26, 2025

  • CVE-2026-3494
    21Monitor

    MariaDB Server Audit Plugin Comment Handling Bypass

    MediumCVSS 5.3Proof of conceptEPSS 0%

    mariadb · mariadbMar 3, 2026

  • CVE-2025-32967
    21Monitor

    OpenEMR doesn't log password administration properly

    MediumCVSS 5.4No exploitEPSS 0%

    open-emr · openemrMay 23, 2025

  • CVE-2025-53498
    21Monitor

    Lack of Audit Logging in AbuseFilter

    MediumCVSS 5.3No exploitEPSS 0%

    wikimedia foundation · mediawiki - abusefilter extensionJul 7, 2025

  • CVE-2025-62307
    21Monitor

    HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

    MediumCVSS 5.4No exploitEPSS 0%

    hcl software · iemAug 20, 2026

  • CVE-2026-92002
    20Monitor

    MISP: Authentication failure logging suppressed during Redis unavailability

    MediumCVSS 5.1No exploitEPSS 0%

    misp · mispSep 15, 2026

  • CVE-2024-10863
    20Monitor

    Client-side audit exclusion vulnerability

    MediumCVSS 5.1No exploitEPSS 0%

    opentext · secure content managerNov 22, 2024

  • CVE-2019-19295
    17Monitor

    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0).

    MediumCVSS 4.3No exploitEPSS 1%

    siemens · sinvr 3 central control serverMar 10, 2020

  • CVE-2022-25783
    17Monitor

    Hacking attempts from logged-in users are not properly logged by GM

    MediumCVSS 4.3No exploitEPSS 0%

    secomea · gatemanager 4250 firmwareMay 4, 2022

  • CVE-2021-33689
    17Monitor

    When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version

    MediumCVSS 4.3No exploitEPSS 0%

    sap · netweaver application server javaJul 14, 2021

All vulnerability classes