org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10571076...

org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: GHSA-3M86-C9X3-VWM9...

Cross-site Scripting (XSS)

org.graylog2:graylog2-server is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insecure input handling due to the ability to inject and submit malicious HTML forms via the Event Definition Remediation Step field, which can result in session cookie theft under specific...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.0.0, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.13 Source cves: CVE-2025-46827 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10116752...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10116752...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=6.0.0) +12 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

org.graylog.plugins:graylog-plugin-parent (5.1.6), org.graylog.plugins:graylog-plugin-web-parent (5.1.6) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.6)

org.graylog2:graylog2-server MAVEN version 5.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.6 - org.graylog.plugins:graylog-plugin-web-parent 5.1.6...

org.graylog.plugins:graylog-plugin-parent (5.1.11), org.graylog.plugins:graylog-plugin-web-parent (5.1.11) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.11)

org.graylog2:graylog2-server MAVEN version 5.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.11 - org.graylog.plugins:graylog-plugin-web-parent 5.1.1...

org.graylog.plugins:graylog-plugin-parent (5.2.0-beta.1), org.graylog.plugins:graylog-plugin-web-parent (5.2.0-beta.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.2.0-beta.1)

org.graylog2:graylog2-server MAVEN version 5.2.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (5.2.0-beta.3), org.graylog.plugins:graylog-plugin-web-parent (5.2.0-beta.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.2.0-beta.3)

org.graylog2:graylog2-server MAVEN version 5.2.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.0-beta.3 -...

org.graylog.plugins:graylog-plugin-parent (5.2.0-rc.1), org.graylog.plugins:graylog-plugin-web-parent (5.2.0-rc.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.2.0-rc.1)

org.graylog2:graylog2-server MAVEN version 5.2.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.0-rc.1 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (5.2.2), org.graylog.plugins:graylog-plugin-web-parent (5.2.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.2.2)

org.graylog2:graylog2-server MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.2 - org.graylog.plugins:graylog-plugin-web-parent 5.2.2...

org.graylog.plugins:graylog-plugin-parent (5.2.3), org.graylog.plugins:graylog-plugin-web-parent (5.2.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.2.3)

org.graylog2:graylog2-server MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.3 - org.graylog.plugins:graylog-plugin-web-parent 5.2.3...

org.graylog.plugins:graylog-plugin-parent (5.2.11), org.graylog.plugins:graylog-plugin-web-parent (5.2.11) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.2.11)

org.graylog2:graylog2-server MAVEN version 5.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.11 - org.graylog.plugins:graylog-plugin-web-parent 5.2.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.0.0, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.13 Source cves: CVE-2025-46827 Source advisory: GHSA-76VF-MPMX-777J...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: OSV:GHSA-76VF-MPMX-777J...

org.graylog.plugins:graylog-plugin-parent (4.0.8), org.graylog.plugins:graylog-plugin-web-parent (4.0.8) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (4.0.8)

org.graylog2:graylog2-server MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.8 - org.graylog.plugins:graylog-plugin-web-parent 4.0.8...

org.graylog.plugins:graylog-plugin-parent (4.0.10), org.graylog.plugins:graylog-plugin-web-parent (4.0.10) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (4.0.10)

org.graylog2:graylog2-server MAVEN version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.10 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

org.graylog.plugins:graylog-plugin-parent (4.0.16), org.graylog.plugins:graylog-plugin-web-parent (4.0.16) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (4.0.16)

org.graylog2:graylog2-server MAVEN version 4.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.16 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...