NXLog records

4 published records for vendor nxlog.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2020-35488Proof of concept	The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon cranxlog · nxlog · CWE-502 Pre-auth Deserialization Denial of service	High7.5	—	7.5%	Jan 5, 2021
26Monitor	CVE-2023-32791No exploit	Cross-Site Request Forgery on NXLog Managernxlog · nxlog manager · CWE-352 Pre-auth CSRF	Medium6.5	—	0.2%	Oct 3, 2023
26Monitor	CVE-2023-32792No exploit	Cross-Site Request Forgery on NXLog Managernxlog · nxlog manager · CWE-352 Pre-auth CSRF	Medium6.5	—	0.2%	Oct 3, 2023
24Monitor	CVE-2023-32790No exploit	XSS on NXLog Managernxlog · nxlog manager · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Oct 3, 2023

CVE-2020-35488
32Monitor
The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon cra
HighCVSS 7.5Proof of conceptEPSS 7%
nxlog · nxlogJan 5, 2021
CVE-2023-32791
26Monitor
Cross-Site Request Forgery on NXLog Manager
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
nxlog · nxlog managerOct 3, 2023
CVE-2023-32792
26Monitor
Cross-Site Request Forgery on NXLog Manager
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
nxlog · nxlog managerOct 3, 2023
CVE-2023-32790
24Monitor
XSS on NXLog Manager
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
nxlog · nxlog managerOct 3, 2023