ScienceLogic records
26 published records for vendor sciencelogic.
Researcher profile
- Entered KEV
- 1 · 3.8%
- Weaponized
- 1 · 3.8%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- 3 days
Attack profile
All records
26 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
68This week | CVE-2024-9537Weaponized | ScienceLogic SL1 unspecified vulnerabilitysciencelogic · sl1 | Critical9.3 | KEV | 3.8% | Oct 18, 2024 |
35Monitor | CVE-2022-48581No exploit | A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input asciencelogic · sl1 · CWE-78 | High8.8 | — | 1.5% | Aug 9, 2023 |
35Monitor | CVE-2022-48582No exploit | A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controllesciencelogic · sl1 · CWE-78 | High8.8 | — | 1.5% | Aug 9, 2023 |
35Monitor | CVE-2022-48583No exploit | A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled isciencelogic · sl1 · CWE-78 | High8.8 | — | 1.5% | Aug 9, 2023 |
35Monitor | CVE-2022-48584No exploit | A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐contsciencelogic · sl1 · CWE-78 | High8.8 | — | 1.5% | Aug 9, 2023 |
35Monitor | CVE-2022-48580No exploit | A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled sciencelogic · sl1 · CWE-78 | High8.8 | — | 1.5% | Aug 9, 2023 |
35Monitor | CVE-2022-48585No exploit | A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inpusciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48587No exploit | A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input asciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48604No exploit | A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input ansciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48586No exploit | A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and psciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48589No exploit | A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled insciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48590No exploit | A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐contrsciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48591No exploit | A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes usciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48592No exploit | A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takessciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48594No exploit | A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled isciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48595No exploit | A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controllesciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48596No exploit | A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled isciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48597No exploit | A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inpsciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48598No exploit | A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controllsciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48599No exploit | A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled insciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48600No exploit | A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and pasciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48601No exploit | A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled insciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48602No exploit | A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled insciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48603No exploit | A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled isciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
35Monitor | CVE-2022-48588No exploit | A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controllsciencelogic · sl1 · CWE-78 | High8.8 | — | 0.7% | Aug 9, 2023 |
- CVE-2024-953768This week
ScienceLogic SL1 unspecified vulnerability
CriticalCVSS 9.3KEVWeaponizedEPSS 3%sciencelogic · sl1Oct 18, 2024
- CVE-2022-4858135Monitor
A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input a
HighCVSS 8.8No exploitEPSS 1%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858235Monitor
A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlle
HighCVSS 8.8No exploitEPSS 1%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858335Monitor
A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i
HighCVSS 8.8No exploitEPSS 1%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858435Monitor
A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐cont
HighCVSS 8.8No exploitEPSS 1%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858035Monitor
A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled
HighCVSS 8.8No exploitEPSS 1%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858535Monitor
A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inpu
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858735Monitor
A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input a
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4860435Monitor
A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input an
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858635Monitor
A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858935Monitor
A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859035Monitor
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐contr
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859135Monitor
A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes u
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859235Monitor
A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859435Monitor
A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859535Monitor
A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlle
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859635Monitor
A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859735Monitor
A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inp
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859835Monitor
A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controll
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4859935Monitor
A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4860035Monitor
A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and pa
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4860135Monitor
A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4860235Monitor
A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4860335Monitor
A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023
- CVE-2022-4858835Monitor
A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controll
HighCVSS 8.8No exploitEPSS 0%sciencelogic · sl1Aug 9, 2023