logrhythm records

4 published records for vendor logrhythm.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-25094No exploit	LogRhythm Platform Manager 7.4.9 allows Command Injection.logrhythm · platform manager · CWE-78 pre-auth RCE Command injection	Critical9.8	—	3.1%	Dec 16, 2020
35Monitor	CVE-2020-25096No exploit	LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.logrhythm · platform manager	High8.8	—	1.0%	Dec 16, 2020
35Monitor	CVE-2020-25095No exploit	LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.logrhythm · platform manager · CWE-352 pre-auth RCE CSRF	High8.8	—	1.0%	Dec 16, 2020
24Monitor	CVE-2021-41943No exploit	Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your Hlogrhythm · logrhythm · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Dec 12, 2022

CVE-2020-25094
40Plan
LogRhythm Platform Manager 7.4.9 allows Command Injection.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Command injection
logrhythm · platform managerDec 16, 2020
CVE-2020-25096
35Monitor
LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.
HighCVSS 8.8No exploitEPSS 1%
logrhythm · platform managerDec 16, 2020
CVE-2020-25095
35Monitor
LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- CSRF
logrhythm · platform managerDec 16, 2020
CVE-2021-41943
24Monitor
Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your H
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
logrhythm · logrhythmDec 12, 2022