Graylog kayıtları

graylog üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 5
Düzeltme kaydı olan: %59,1
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
45Planlayın	CVE-2024-24824Kavram kanıtı	graylog2-server vulnerable to instantiation of arbitrary classes triggered by API requestgraylog · graylog · CWE-284 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%34,7	7 Şub 2024
39İzleyin	CVE-2021-37759İstismar yok	A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked sgraylog · graylog · CWE-532 Kimlik doğrulamasız Bilgi sızıntısı	Kritik9,8	—	%1,3	31 Tem 2021
39İzleyin	CVE-2021-37760İstismar yok	A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked sessiograylog · graylog · CWE-532 Kimlik doğrulamasız Bilgi sızıntısı	Kritik9,8	—	%1,3	31 Tem 2021
37İzleyin	CVE-2026-1435İstismar yok	Incorrect management of session invalidation vulnerability in Graylog Web Interfacegraylog · graylog · CWE-613 Kimlik doğrulamasız	Kritik9,3	—	%0,4	18 Şub 2026
35İzleyin	CVE-2025-53106İstismar yok	Graylog vulnerable to privilege escalation through API tokensgraylog · graylog · CWE-285 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,6	2 Tem 2025
32İzleyin	CVE-2020-15813İstismar yok	Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers.graylog · graylog · CWE-295 Kimlik doğrulamasız Zayıf kripto	Yüksek8,1	—	%0,8	17 Tem 2020
28İzleyin	CVE-2024-52506İstismar yok	Graylog can leak other users' reports via concurrent PDF report renderinggraylog · graylog · CWE-200 Bilgi sızıntısı	Yüksek7,1	—	%0,6	18 Kas 2024
28İzleyin	CVE-2026-1436İstismar yok	Improper Access Control (IDOR) vulnerability in Graylog Web Interfacegraylog · graylog · CWE-639 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,2	18 Şub 2026
24İzleyin	CVE-2018-14380İstismar yok	In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/Quegraylog · graylog · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,0	18 Tem 2018
24İzleyin	CVE-2018-11650İstismar yok	Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.graylog · graylog · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	1 Haz 2018
24İzleyin	CVE-2018-11651İstismar yok	Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, compograylog · graylog · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	1 Haz 2018
21İzleyin	CVE-2023-41045İstismar yok	Insecure source port usage for DNS queries in Grayloggraylog · graylog · CWE-345 Kimlik doğrulamasız	Orta5,3	—	%0,4	31 Ağu 2023
21İzleyin	CVE-2025-30373İstismar yok	Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong valuegraylog · graylog · CWE-285 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,3	7 Nis 2025
21İzleyin	CVE-2025-46827İstismar yok	Graylog Allows Session Takeover via Insufficient HTML Sanitizationgraylog · graylog · CWE-79 XSS	Orta5,4	—	%0,3	7 May 2025
21İzleyin	CVE-2026-1437İstismar yok	Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interfacegraylog · graylog · CWE-79 pre-auth RCE XSS	Orta5,3	—	%0,2	18 Şub 2026
21İzleyin	CVE-2026-1441İstismar yok	Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interfacegraylog · graylog · CWE-79 pre-auth RCE XSS	Orta5,3	—	%0,2	18 Şub 2026
21İzleyin	CVE-2026-1440İstismar yok	Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interfacegraylog · graylog · CWE-79 pre-auth RCE XSS	Orta5,3	—	%0,2	18 Şub 2026
21İzleyin	CVE-2026-1438İstismar yok	Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interfacegraylog · graylog · CWE-79 pre-auth RCE XSS	Orta5,3	—	%0,2	18 Şub 2026
21İzleyin	CVE-2026-1439İstismar yok	Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interfacegraylog · graylog · CWE-79 pre-auth RCE XSS	Orta5,3	—	%0,2	18 Şub 2026
17İzleyin	CVE-2024-24823İstismar yok	graylog2-server Session Fixation vulnerability through cookie injectiongraylog · graylog · CWE-384 XSS	Orta4,4	—	%0,4	7 Şub 2024
15İzleyin	CVE-2023-41044Kavram kanıtı	Partial path traversal vulnerability in Support Bundle feature of Grayloggraylog · graylog · CWE-22 Yol geçişi	Düşük3,8	—	%0,7	31 Ağu 2023
12İzleyin	CVE-2023-41041İstismar yok	User session is still usable after logout in graylog2-servergraylog · graylog · CWE-613	Düşük3,1	—	%0,5	30 Ağu 2023

CVE-2024-24824
45Planlayın
graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request
YüksekCVSS 8,8Kavram kanıtıEPSS %35
- RCE
- Erişim denetimi (IDOR)
graylog · graylog7 Şub 2024
CVE-2021-37759
39İzleyin
A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked s
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
graylog · graylog31 Tem 2021
CVE-2021-37760
39İzleyin
A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked sessio
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
graylog · graylog31 Tem 2021
CVE-2026-1435
37İzleyin
Incorrect management of session invalidation vulnerability in Graylog Web Interface
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
graylog · graylog18 Şub 2026
CVE-2025-53106
35İzleyin
Graylog vulnerable to privilege escalation through API tokens
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
graylog · graylog2 Tem 2025
CVE-2020-15813
32İzleyin
Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers.
YüksekCVSS 8,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- Zayıf kripto
graylog · graylog17 Tem 2020
CVE-2024-52506
28İzleyin
Graylog can leak other users' reports via concurrent PDF report rendering
YüksekCVSS 7,1İstismar yokEPSS %1
- Bilgi sızıntısı
graylog · graylog18 Kas 2024
CVE-2026-1436
28İzleyin
Improper Access Control (IDOR) vulnerability in Graylog Web Interface
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
graylog · graylog18 Şub 2026
CVE-2018-14380
24İzleyin
In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/Que
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
graylog · graylog18 Tem 2018
CVE-2018-11650
24İzleyin
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
graylog · graylog1 Haz 2018
CVE-2018-11651
24İzleyin
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, compo
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
graylog · graylog1 Haz 2018
CVE-2023-41045
21İzleyin
Insecure source port usage for DNS queries in Graylog
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
graylog · graylog31 Ağu 2023
CVE-2025-30373
21İzleyin
Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
graylog · graylog7 Nis 2025
CVE-2025-46827
21İzleyin
Graylog Allows Session Takeover via Insufficient HTML Sanitization
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
graylog · graylog7 May 2025
CVE-2026-1437
21İzleyin
Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface
OrtaCVSS 5,3İstismar yokEPSS %0
- pre-auth RCE
- XSS
graylog · graylog18 Şub 2026
CVE-2026-1441
21İzleyin
Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface
OrtaCVSS 5,3İstismar yokEPSS %0
- pre-auth RCE
- XSS
graylog · graylog18 Şub 2026
CVE-2026-1440
21İzleyin
Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface
OrtaCVSS 5,3İstismar yokEPSS %0
- pre-auth RCE
- XSS
graylog · graylog18 Şub 2026
CVE-2026-1438
21İzleyin
Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface
OrtaCVSS 5,3İstismar yokEPSS %0
- pre-auth RCE
- XSS
graylog · graylog18 Şub 2026
CVE-2026-1439
21İzleyin
Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface
OrtaCVSS 5,3İstismar yokEPSS %0
- pre-auth RCE
- XSS
graylog · graylog18 Şub 2026
CVE-2024-24823
17İzleyin
graylog2-server Session Fixation vulnerability through cookie injection
OrtaCVSS 4,4İstismar yokEPSS %0
- XSS
graylog · graylog7 Şub 2024
CVE-2023-41044
15İzleyin
Partial path traversal vulnerability in Support Bundle feature of Graylog
DüşükCVSS 3,8Kavram kanıtıEPSS %1
- Yol geçişi
graylog · graylog31 Ağu 2023
CVE-2023-41041
12İzleyin
User session is still usable after logout in graylog2-server
DüşükCVSS 3,1İstismar yokEPSS %0
graylog · graylog30 Ağu 2023