253 matches found
Logpoint AgentX security vulnerabilities
Logpoint AgentX is a component of a Security Information and Event Management SIEM solution from Logpoint Denmark. A security vulnerability exists in Logpoint AgentX versions prior to 1.5.0 that stems from inadequate access control and allows the li-admin user to access sensitive information...
CVE-2025-26789: Improper Neutralization of Special Elements Used in a Template Engine
An issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access controls allowed li-admin users to access sensitive information about AgentX Manager in a Logpoint deployment...
PT-2025-7239 · Logpoint · Logpoint Agentx
Name of the Vulnerable Software and Affected Versions: Logpoint AgentX versions prior to 1.5.0 Description: An issue was discovered in Logpoint AgentX, where a vulnerability caused by limited access controls allowed li-admin users to access sensitive information about AgentX Manager in a Logpoint...
CVE-2022-48685
An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file cleansecbioldlogs is writable by all users and is executed as root, leading to privilege escalation...
CVE-2022-48684
An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search template can leverage this to execut...
CVE-2024-56086
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...
CVE-2024-56084
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...
CVE-2024-56085
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56086
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...
CVE-2024-56084
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...
CVE-2024-56087
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56087
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56085: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
PT-2024-36712
Name of the Vulnerable Software and Affected Versions Logpoint versions prior to 7.5.0 Description A problem was discovered in Logpoint where authenticated users can inject payloads while creating the Search Template Dashboard. These payloads are executed, leading to Server-Side Template Injectio...
Logpoint security vulnerabilities
Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0, which stems from the fact that an authenticated user can inject payloads during the creation of a search template dashboard, which can be executed,...
CVE-2024-56086
A security vulnerability exists in Logpoint versions prior to 7.5.0 . Authenticated users can inject malicious payloads into Report Templates . These payloads are subsequently executed when the backup process is initiated, which can lead to Remote Code Execution (RCE). Exploitation details or spe...
CVE-2024-56084
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...
CVE-2024-56086
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...
PT-2024-36714 · Logpoint · Logpoint
Name of the Vulnerable Software and Affected Versions: Logpoint versions prior to 7.5.0 Description: The issue allows authenticated users to inject payloads while querying the Search Template Dashboard. These payloads are executed, leading to Server-Side Template Injection. Recommendations: For...