org.graylog2:graylog2-rest-routes (1.2.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.2.1)

org.graylog2:graylog2-server MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-Q9Q2-3PPX-MW...

org.graylog.plugins:usage-statistics (2.0.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0)

org.graylog2:graylog2-server MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.1)

org.graylog2:graylog2-server MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.3)

org.graylog2:graylog2-server MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.3 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-alpha.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-alpha.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-alpha.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.1.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-alpha.2 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.4) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.4 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-rc.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-rc.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.2), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.2 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.1) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.5), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.5) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-beta.5)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.5 -...

org.graylog.plugins:graylog-plugin-parent (2.2.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.1) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.1)

org.graylog2:graylog2-server MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.1 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.1) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.3.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.1 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.3), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.4), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.4) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.4 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0-rc.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-rc.1) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-rc.1 -...

PT-2025-20319 · Maven · Org.Graylog2:Graylog2-Server

Impact Two minor vulnerabilities were identified in the Graylog2 enterprise server, which can be combined to carry out a stored cross-site scripting attack. An attacker with the permission FILES CREATE can exploit these vulnerabilities to upload arbitrary Javascript code to the Graylog2 server,...

com.aconex.scrutineer:scrutineer (1.0.5), org.graylog2:graylog2-plugin (>=0.10.1, <=0.10.14) potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.19.10)

org.elasticsearch:elasticsearch MAVEN version 0.19.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.aconex.scrutineer:scrutineer 1.0.5 - org.graylog2:graylog2-plugin =0.10.1, =0.10.14 Source...

Authentication Bypass

org.graylog2, graylog2-server is vulnerable to Authentication Bypass. The vulnerability is due to HTTP Inputs not correctly rejecting messages when a specified header is missing or has an incorrect value, allowing the message to be ingested despite returning a 401 HTTP response...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-30373 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-30373 Source advisory: OSV:GHSA-Q7G5-JQ6P-6WVX...