Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/19 1:29 p.m.3 views

CVE-2026-1438

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

6.1CVSS6.1AI score0.00049EPSS
Exploits0References1
NVD
NVD
added 2026/02/18 2:16 p.m.1 views

CVE-2026-1438

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

6.1CVSS0.00049EPSS
Exploits0References1
CVE
CVE
added 2026/02/18 1:13 p.m.6 views

CVE-2026-1438

CVE-2026-1438 describes a Reflected XSS in the Graylog Web Interface console (version 2.2.3) caused by insufficient sanitization/escaping of HTML output. Several endpoints may embed segments of the URL in responses without proper output encoding, enabling an attacker to inject and execute arbitra...

6.1CVSS6.1AI score0.00049EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/18 1:13 p.m.4 views

CVE-2026-1438 Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

5.3CVSS6.1AI score0.00049EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/18 1:13 p.m.18 views

CVE-2026-1438 Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

5.3CVSS0.00049EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/18 12:0 a.m.2 views

PT-2026-20394

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

5.3CVSS6.1AI score0.00049EPSS
Exploits0References2
Rows per page
Query Builder