CVE-2025-0936

CVE-2025-0936 affects Arista EOS with a gNMI transport enabled, where using the gNOI File TransferToRemote RPC with remote-credentials can cause those credentials to be logged on the local EOS device or on remote accounting servers (TACACS, RADIUS). The issue is triggered when the OpenConfig gNOI...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10116752...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.1.3) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.9)

org.graylog2:graylog2-server MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.2.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: GHSA-76VF-MPMX-777J...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: OSV:GHSA-76VF-MPMX-777J...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=5.1.0, <=5.1.3), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=5.1.0, <=5.1.1) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.3)

org.graylog2:graylog2-server MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =5.1.0, =5.1.0, =5.1.0, =5.1.2 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.2.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.1.2) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.13)

org.graylog2:graylog2-server MAVEN version 5.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.2.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.0.0, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.13 Source cves: CVE-2025-46827 Source advisory: GHSA-76VF-MPMX-777J...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.4.3)

org.graylog2:graylog2-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 1.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.4.0, <=4.5.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (4.2.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (4.3.6)

org.graylog2:graylog2-server MAVEN version 4.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =4.4.0, =4.2.0, =4.4.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.1.0, <=4.3.1) +4 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (4.2.3)

org.graylog2:graylog2-server MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=2.0.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.2.0, <=3.2.5) +4 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (3.2.5)

org.graylog2:graylog2-server MAVEN version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =2.0.0, =3.2.0, =2.0.0, =2.0.2, =2.2...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.0.0, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.13 Source cves: CVE-2025-46827 Source advisory: OSV:GHSA-76VF-MPMX-777J...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.0.8)

org.graylog2:graylog2-server MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.1.3) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.9)

org.graylog2:graylog2-server MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.2.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +4 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.4.3)

org.graylog2:graylog2-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 1.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=5.1.0, <=5.1.3), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=5.1.0, <=5.1.1) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.3)

org.graylog2:graylog2-server MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =5.1.0, =5.1.0, =5.1.0, =5.1.2 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.0.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (5.0.8)

org.graylog2:graylog2-server MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.1.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (>=6.0.0, <=6.1.16)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.16 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGGRAYLOG2-10121303...