Vulnerabilities

TI-2025-41513 CVE-2025-67900 · GHSA-p779-v69c-4294

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

LOW 36

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00121 Published 2025-12-14 Fixed in 6.11 CWE-829

TI-2023-16044 CVE-2023-32792 · GHSA-2jpg-9jfq-36cj

Cross-Site Request Forgery on NXLog Manager

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00234 Published 2023-10-03 No fix listed CWE-352

TI-2023-16043 CVE-2023-32791 · GHSA-7hv8-cgxr-prj5

Cross-Site Request Forgery on NXLog Manager

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00234 Published 2023-10-03 No fix listed CWE-352

TI-2023-16042 CVE-2023-32790 · GHSA-v9q5-g2rr-38w9

XSS on NXLog Manager

LOW 27

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00338 Published 2023-10-03 No fix listed CWE-79

TI-2020-18010 CVE-2020-35488 · GHSA-9rx5-vw74-rpgf

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote…

MEDIUM 43

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07599 Published 2021-01-05 No fix listed CWE-502

Vulnerabilities

Filters

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Cross-Site Request Forgery on NXLog Manager

Cross-Site Request Forgery on NXLog Manager

XSS on NXLog Manager

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote…