Vulnerabilities

TI-2021-18500 CVE-2021-41943 · GHSA-2rqg-qj27-3wj5

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action ->…

LOW 28

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your HTML tag in the name field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00507 Published 2022-12-12 No fix listed CWE-79

TI-2020-15347 CVE-2020-25094 · GHSA-r929-7jrv-6rh2

LogRhythm Platform Manager 7.4.9 allows Command Injection.

MEDIUM 48

LogRhythm Platform Manager 7.4.9 allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03176 Published 2020-12-17 No fix listed CWE-78

TI-2020-15348 CVE-2020-25095 · GHSA-6mh7-r2rw-gp32

LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.

MEDIUM 40

LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2020-12-17 No fix listed CWE-352

TI-2020-15349 CVE-2020-25096 · GHSA-3j89-v6qj-mgf2

LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.

MEDIUM 40

LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01024 Published 2020-12-17 No fix listed

Vulnerabilities

Filters

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action ->…

LogRhythm Platform Manager 7.4.9 allows Command Injection.

LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.

LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.