Logrhythm

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Logrhythm records in CISA KEV

No Logrhythm vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Platform Manager · all components

TI-2020-15347 CVE-2020-25094 · GHSA-r929-7jrv-6rh2

MEDIUM 48

LogRhythm Platform Manager 7.4.9 allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03176 Published 2020-12-17 No fix listed CWE-78

TI-2020-15349 CVE-2020-25096 · GHSA-3j89-v6qj-mgf2

MEDIUM 40

LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01024 Published 2020-12-17 No fix listed

TI-2020-15348 CVE-2020-25095 · GHSA-6mh7-r2rw-gp32

MEDIUM 40

LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2020-12-17 No fix listed CWE-352