com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-30373 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-30373 Source advisory: MEND:CVE-2025-30373...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.4.0, <=5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=4.2.0, <=5.1.3) +4 more potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=4.3.0, <=5.1.10)

org.graylog2:graylog2-server MAVEN version =4.3.0, =4.4.0, =4.2.0, =4.2.0, =2.0.0, =4.3.0, =4.3.0, =5.1.10 Source cves: CVE-2024-24823 Source advisory: OSV:GHSA-3XF8-G8GR-G7RH...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.4.0, <=5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=4.2.0, <=5.1.3) +4 more potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=4.3.0, <=5.1.10)

org.graylog2:graylog2-server MAVEN version =4.3.0, =4.4.0, =4.2.0, =4.2.0, =2.0.0, =4.3.0, =4.3.0, =5.1.10 Source cves: CVE-2024-24823 Source advisory: GHSA-3XF8-G8GR-G7RH...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24823 Source advisory: GHSA-3XF8-G8GR-G7RH...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24823 Source advisory: OSV:GHSA-3XF8-G8GR-G7RH...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=5.2.1) +10 more potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=2.0.0, <=5.1.10)

org.graylog2:graylog2-server MAVEN version =2.0.0, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2024-24824 Source advisory: OSV:GHSA-P6GG-5HF4-4RGJ...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=5.2.1) +10 more potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=2.0.0, <=5.1.10)

org.graylog2:graylog2-server MAVEN version =2.0.0, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2024-24824 Source advisory: GHSA-P6GG-5HF4-4RGJ...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24824 Source advisory: OSV:GHSA-P6GG-5HF4-4RGJ...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24824 Source advisory: GHSA-P6GG-5HF4-4RGJ...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0-alpha.1, <=5.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0-alpha.1, <=5.2.3) potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=5.2.0-alpha.1, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.0-alpha.1, =5.2.3 Source cves: CVE-2024-24824 Source advisory: MEND:CVE-2024-24824...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=5.2.1) +10 more potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=2.0.0, <=5.1.10)

org.graylog2:graylog2-server MAVEN version =2.0.0, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2024-24824 Source advisory: MEND:CVE-2024-24824...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.4.0, <=5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=4.2.0, <=5.1.3) +4 more potentially affected by CVE-2024-24823 via org.graylog2:graylog2-server (>=4.3.0, <=5.2.3)

org.graylog2:graylog2-server MAVEN version =4.3.0, =4.4.0, =4.2.0, =4.2.0, =2.0.0, =4.3.0, =4.3.0, =5.2.3 Source cves: CVE-2024-24823 Source advisory: MEND:CVE-2024-24823...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=5.0.0) +12 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=5.0.8)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2023-41045 Source advisory: MEND:CVE-2023-41045...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41045 Source advisory: MEND:CVE-2023-41045...

DNS Cache Poisoning

graylog2-server is vulnerable to DNS Cache Poisoning. The vulnerability exists because the library uses a single source port for DNS queries, leading to cache poisoning attacks...

Session Fixation

graylog2-server is vulnerable to Session Fixation. The vulnerability exists because a node may still have the session cached even when a user has explicitly logged out, which allows the session to still be used for API requests until it has reached its original expiry time...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41044 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41044 Source advisory: OSV:GHSA-2Q4P-F6GF-MQR5...

org.graylog.plugins:graylog-plugin-parent (>=5.1.0, <=5.1.2), org.graylog.plugins:graylog-plugin-web-parent (>=5.1.0, <=5.1.2) potentially affected by CVE-2023-41044 via org.graylog2:graylog2-server (>=5.1.0, <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.2 Source cves: CVE-2023-41044 Source advisory: GHSA-2Q4P-F6GF-MQR5...

org.graylog.plugins:graylog-plugin-parent (4.0.5), org.graylog.plugins:graylog-plugin-web-parent (4.0.5) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.5)

org.graylog2:graylog2-server MAVEN version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.5 - org.graylog.plugins:graylog-plugin-web-parent 4.0.5...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.0.2), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.0.2) +4 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.1.2)

org.graylog2:graylog2-server MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =4.0.0, =4.0.0, =4.0.0, =4.0.1, =4.0...