Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
LogStare Inc. records in CISA KEVNo LogStare Inc. vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 38
Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows).
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00162 · Published 2025-11-21 · No fix listed CWE-427
Priority LOW 30
LogStare Collector improperly handles the password hash data.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.0028 · Published 2025-11-21 · No fix listed CWE-201
Priority LOW 29
Cross-site request forgery vulnerability exists in LogStare Collector.
CVSS 4.0MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.00155 · Published 2025-11-21 · No fix listed CWE-352
Priority LOW 29
The installation directory of LogStare Collector is configured with incorrect access permissions.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00131 · Published 2025-11-21 · No fix listed CWE-276
Priority LOW 24
LogStare Collector contains an incorrect authorization vulnerability in UserRegistration.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00246 · Published 2025-11-21 · No fix listed CWE-863
Priority LOW 21
LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement.
CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00188 · Published 2025-11-21 · No fix listed CWE-79
Open these records in search →