Vendors / NXLog Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now NXLog records in CISA KEV No NXLog vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.07599 · Published 2021-01-05 · No fix listed CWE-502
Priority LOW 36
NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.
CVSS 3.1 HIGH 8.1· Local · No auth · No interaction · EPSS 0.00121 · Published 2025-12-14 · Fixed in 6.11 CWE-829
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00234 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00234 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 27
Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00338 · Published 2023-10-03 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 3 0 0
