Adiscon

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Adiscon records in CISA KEV

No Adiscon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Loganalyzer 6 records HIGH Password Manager For Iis 1 record MEDIUM Winsyslog 1 record MEDIUM

Records

8 records

TI-2023-17333 CVE-2023-34600 · GHSA-cvvh-gx49-6x22

Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

HIGH 70

Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24178 Published 2023-06-20 No fix listed CWE-89

TI-2023-18195 CVE-2023-36306 · GHSA-jrc2-mc36-hv5c

A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13…

MEDIUM 60

A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php, details.php, index.php, search.php, export.php, reports…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05313 Published 2023-08-08 No fix listed CWE-79

TI-2022-16937 CVE-2022-36664 · GHSA-9mqj-rmc8-938f

Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the…

MEDIUM 60

Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03954 Published 2022-12-26 No fix listed CWE-79

TI-2018-14081 CVE-2018-19877 · GHSA-5jc5-95gm-6p5f

login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.

MEDIUM 45

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.18563 Published 2018-12-05 No fix listed CWE-79

TI-2003-01418 CVE-2003-1518 · GHSA-46gf-22qm-927w

Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU…

MEDIUM 44

Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.07224 Published 2007-10-25 No fix listed CWE-119

TI-2021-11766 CVE-2021-31738 · GHSA-wmxv-cm6v-5x65

Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.

LOW 29

Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00937 Published 2021-06-08 No fix listed CWE-79

TI-2014-05005 CVE-2014-6070 · GHSA-5p26-q4vq-vrm2

Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web script or HTML via the hostname in (1) index.php or (2) detail.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03582 Published 2014-09-11 No fix listed CWE-79

TI-2012-03277 CVE-2012-3790 · GHSA-4w9g-pm86-x297

Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in a Search acti…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01233 Published 2012-06-20 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	6
Low	0
No CVSS	0