CVE-2024-33858

Logpoint versions prior to 7.4.0 are vulnerable to a path injection vulnerability when adding a CSV enrichment source. The root cause is that the source_name parameter can be manipulated to accept an absolute path, allowing an attacker to write the CSV file to a specific location within the /tmp ...

CVE-2024-48951

Logpoint versions prior to 7.5.0 are vulnerable to a Server-Side Request Forgery (SSRF) within the SOAR component. This flaw can be exploited to leak the Logpoint API Token , potentially resulting in an authentication bypass . To remediate this issue, users should update to version 7.5.0 or later...

CVE-2024-33860

Logpoint versions prior to 7.4.0 are vulnerable to Local File Inclusion (LFI) . This issue occurs when an arbitrary File Path is used within the File System Collector , allowing an attacker to view the content of the specified file within the incoming logs. To resolve this, it is recommended to u...

CVE-2024-29865

Logpoint versions prior to 7.1.0 are vulnerable to Self-XSS on the LDAP authentication page . The flaw exists because the username field in the LDAP login form does not properly neutralize input, allowing for cross-site scripting. To remediate this, users should update to version 7.1.0 or later ....

CVE-2024-33857

Logpoint versions prior to 7.4.0 are vulnerable to Server Side Request Forgery (SSRF) due to a lack of input validation on URLs within the threat intelligence feature. An attacker with low-level access to the system can exploit this flaw to trigger unauthorized server-side requests. To remediate ...

CVE-2024-30176

In Logpoint versions prior to 7.4.0 , a security vulnerability allows an attacker to enumerate a valid list of usernames . This occurs by leveraging publicly exposed URLs associated with shared widgets . To resolve this issue, it is recommended to update the software to version 7.4.0 or later . D...

CVE-2024-33859

The network security application Logpoint is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 7.4.0 . The root cause is the failure to escape HTML code sent through logs within the "Interesting Field" Web UI. This could allow an attacker to execute malicious scripts in ...

CVE-2024-33856

An issue was discovered in Logpoint versions prior to 7.4.0 that allows an attacker to enumerate a valid list of usernames. This vulnerability originates from an Observable Response Discrepancy (CWE-204) at the Forgot Password endpoint, where an attacker can identify valid users by observing vari...

CVE-2024-48953

Logpoint versions prior to 7.5.0 are vulnerable to a security issue caused by missing authorization checks on specific endpoints. Specifically, the endpoints used for creating, editing, or deleting third-party authentication modules do not properly validate user permissions. This flaw allows unau...

CVE-2024-48950

The network security application Logpoint is vulnerable in versions prior to 7.5.0 due to an exposed endpoint used by the Distributed Logpoint Setup . This flaw allows unauthenticated attackers to bypass CSRF protections and authentication mechanisms. To remediate this issue, users should update ...

CVE-2024-56086

A security vulnerability exists in Logpoint versions prior to 7.5.0 . Authenticated users can inject malicious payloads into Report Templates . These payloads are subsequently executed when the backup process is initiated, which can lead to Remote Code Execution (RCE). Exploitation details or spe...

CVE-2024-48954

The Logpoint network security application, in versions prior to 7.5.0 , contains a vulnerability stemming from unvalidated input during the EventHub Collector setup . An authenticated user can exploit this flaw to achieve Remote Code Execution (RCE) . While the CVSS score indicates a Medium sever...

CVE-2024-56087

A Server-Side Template Injection (SSTI) vulnerability exists in Logpoint versions prior to 7.5.0 . Authenticated users can inject and execute malicious payloads while querying the Search Template Dashboard . To remediate this issue, users should update to version 7.5.0 or later. A temporary worka...

CVE-2024-56085

Versions of Logpoint prior to 7.5.0 are susceptible to a Server-Side Template Injection (SSTI) vulnerability. The root cause is the improper neutralization of special elements, allowing authenticated users to inject and execute malicious payloads during the creation of a Search Template Dashboard...

CVE-2022-48684

Logpoint CVE-2022-48684 affects the Logpoint product prior to 7.1.1. The issue is a template injection in the search template that uses Jinja templating to generate dynamic data, which can be abused to achieve code execution. The impact is described as code execution as the loginspect user. Sever...

CVE-2025-66360

Logpoint before 7.7.0 is affected. The issue stems from an improperly configured access control policy that exposes sensitive internal Redis service information to li-admin users, enabling privilege escalation. Affected software: Logpoint SIEM prior to 7.7.0. Root cause: misconfigured access cont...

CVE-2025-66359

The CVE-2025-66359 issue affects Logpoint before 7.7.0. It is a cross-site scripting (XSS) vulnerability caused by insufficient input validation and lack of output escaping across multiple components. Affected software: Logpoint SIEM prior to 7.7.0. Impact: potential execution of injected scripts...

CVE-2025-66361

CVE-2025-66361 affects Logpoint SIEM prior to 7.7.0. The issue is exposure of sensitive information in System Processes during extended high CPU load. Connected sources (Red Hat, CIRCL, EUVD, NVD, etc.) corroborate the same description. No root-cause technical specifics or remediation steps are p...