org.graylog.plugins:graylog-plugin-parent (4.3.0), org.graylog.plugins:graylog-plugin-web-parent (4.3.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.0)

org.graylog2:graylog2-server MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.0 - org.graylog.plugins:graylog-plugin-web-parent 4.3.0...

org.graylog.plugins:graylog-plugin-parent (5.2.7), org.graylog.plugins:graylog-plugin-web-parent (5.2.7) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.2.7)

org.graylog2:graylog2-server MAVEN version 5.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.7 - org.graylog.plugins:graylog-plugin-web-parent 5.2.7...

org.graylog.plugins:graylog-plugin-parent (4.0.8), org.graylog.plugins:graylog-plugin-web-parent (4.0.8) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.0.8)

org.graylog2:graylog2-server MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.8 - org.graylog.plugins:graylog-plugin-web-parent 4.0.8...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.0.2), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.0.2) +4 more potentially affected by unknown CVE via org.graylog2:graylog2-server (4.1.2)

org.graylog2:graylog2-server MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =4.0.0, =4.0.0, =4.0.0, =4.0.1, =4.0...

org.graylog.plugins:graylog-plugin-parent (3.0.0-rc.2), org.graylog.plugins:graylog-plugin-web-parent (3.0.0-rc.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.0.0-rc.2)

org.graylog2:graylog2-server MAVEN version 3.0.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.0.0-rc.2 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (3.3.17), org.graylog.plugins:graylog-plugin-web-parent (3.3.17) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.3.17)

org.graylog2:graylog2-server MAVEN version 3.3.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.17 - org.graylog.plugins:graylog-plugin-web-parent 3.3.1...

org.graylog.plugins:graylog-plugin-parent (5.1.11), org.graylog.plugins:graylog-plugin-web-parent (5.1.11) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.11)

org.graylog2:graylog2-server MAVEN version 5.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.11 - org.graylog.plugins:graylog-plugin-web-parent 5.1.1...

de.hilling.graylog:graylog-plugin-function-multimatch (>=1.0.2, <=1.1.0), org.graylog.plugins:graylog-plugin-parent (2.4.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.4.0)

org.graylog2:graylog2-server MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - de.hilling.graylog:graylog-plugin-function-multimatch =1.0.2, =1.1.0 -...

org.graylog.plugins:graylog-plugin-parent (4.0.17), org.graylog.plugins:graylog-plugin-web-parent (4.0.17) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.0.17)

org.graylog2:graylog2-server MAVEN version 4.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.17 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.2.1, <=1.2.2), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.0.1, <=3.1.1) +4 more potentially affected by unknown CVE via org.graylog2:graylog2-server (3.0.2)

org.graylog2:graylog2-server MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.2.1, =3.0.1, =1.0.0, =1.2.0, =1.3...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=5.1.0, <=5.1.3), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=5.1.0, <=5.1.1) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.3)

org.graylog2:graylog2-server MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =5.1.0, =5.1.0, =5.1.0, =5.1.2 -...

org.graylog.plugins:graylog-plugin-parent (5.2.6), org.graylog.plugins:graylog-plugin-web-parent (5.2.6) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.2.6)

org.graylog2:graylog2-server MAVEN version 5.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.6 - org.graylog.plugins:graylog-plugin-web-parent 5.2.6...

org.graylog.telemetry:graylog-telemetry-plugin (>=1.0.0-beta.2, <=1.0.0-beta.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin =1.0.0-beta.2, =1.0.0-beta.3 Source cves: unknown...

Graylog cross-site scripting vulnerability

Graylog is a centralized log management solution from the US company Graylog. The product supports capturing, storing, and analyzing logs in real-time, among other things. A cross-site scripting vulnerability exists in Graylog versions prior to 6.2.0, which stems from an HTML form that can be...

CVE-2025-46827: Improper Neutralization of Input During Web Page Generation

Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with...

PT-2025-20234

Name of the Vulnerable Software and Affected Versions Graylog versions prior to 6.0.14 Graylog versions prior to 6.1.10 Graylog versions prior to 6.2.0 Description Graylog is a log management platform. An issue exists where user session cookies can be obtained by submitting an HTML form within an...

CVE-2025-30373

Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP...

GHSA-Q7G5-JQ6P-6WVX Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value

Impact Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP response 401 is returned, the message will be...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-30373 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-30373 Source advisory: GHSA-Q7G5-JQ6P-6WVX...