Log And Event Manager Security Vulnerabilities and Issues — Log And Event Manager CVE List

Lucene search

SolarwindsLog And Event Manager

5 matches found

CVE•added 2017/03/24 7:59 a.m.•45 views

CVE-2017-5198

SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.

8.8CVSS8.2AI score0.00098EPSS

CVE•added 2015/10/15 8:59 p.m.•42 views

CVE-2015-7840

The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.

7.5CVSS5.2AI score0.19521EPSS

CVE•added 2017/03/24 7:59 a.m.•40 views

CVE-2017-5199

The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.

8.8CVSS8.7AI score0.03023EPSS

CVE•added 2015/10/15 8:59 p.m.•30 views

CVE-2015-7839

SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.

7.5CVSS7.8AI score0.08611EPSS

CVE•added 2014/09/04 5:55 p.m.•29 views

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.

7.5CVSS7.9AI score0.25447EPSS