Klogserver

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Klogserver records in CISA KEV

No Klogserver vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Klog Server · all components

TI-2020-18188 CVE-2020-35729 · GHSA-w4v7-6457-x826

HIGH 84

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88099 Published 2020-12-27 No fix listed CWE-78

TI-2021-02320 CVE-2021-3317 · GHSA-w7mw-3wp8-x68j

HIGH 66

KLog Server through 2.4.1 allows authenticated command injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.41394 Published 2021-01-26 No fix listed CWE-78