Read the docs

Elog Project

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Elog Project records in CISA KEV

No Elog Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Elog 9 records MEDIUM

Records

9 records in Elog · all components

TI-2019-02997 CVE-2019-3993 · GHSA-7hmp-m42w-c587

Information disclosure in ELOG

Priority MEDIUM 62

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.45698 Published 2019-12-17 No fix listed CWE-200
TI-2019-02999 CVE-2019-3995 · GHSA-vhqv-qjvq-7xpf

NULL pointer dereference in ELOG

Priority MEDIUM 56

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.28547 Published 2019-12-17 No fix listed CWE-476
TI-2025-39782 CVE-2025-64349 · GHSA-jvj5-h296-c727

ELOG user profile missing authorization

Priority MEDIUM 40

ELOG allows an authenticated user to modify another user's profile.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00375 Published 2025-10-31 No fix listed CWE-862
TI-2025-39781 CVE-2025-64348 · GHSA-3p95-q82m-f2fv

ELOG configuration file authorization bypass

Priority MEDIUM 40

ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service.

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00321 Published 2025-10-31 No fix listed CWE-862
TI-2025-38833 CVE-2025-62618 · GHSA-9wg9-fwv6-cgcr

ELOG file upload stored XSS

Priority LOW 39

ELOG allows an authenticated user to upload arbitrary HTML files.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00319 Published 2025-10-31 Fixed in 3.1.5-20251014 CWE-434
TI-2019-02998 CVE-2019-3994 · GHSA-8cv3-rqqw-vw5m

Use after free in ELOG

Priority LOW 39

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03278 Published 2019-12-17 No fix listed CWE-416
TI-2019-02996 CVE-2019-3992 · GHSA-2378-x22r-cqpj

Information disclosure in ELOG

Priority LOW 35

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01301 Published 2019-12-17 No fix listed CWE-200
Open these records in search →