Log And Event Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:log_and_event_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Log And Event Manager (514a51bd-ddd9-5913-b185-1019fbeb3f9d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-5199 |
vulnerable | 2026-06-08 05:09:39.331026 |
Details available
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
Published: 2017-03-24T06:56:00.000Z
Updated: 2024-08-05T14:55:35.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5198 |
vulnerable | 2026-06-08 05:09:39.330598 |
Details available
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.
Published: 2017-03-24T06:56:00.000Z
Updated: 2024-08-05T14:55:35.657Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7840 |
vulnerable | 2026-06-08 05:07:02.051988 |
Details available
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
Published: 2015-10-15T20:00:00.000Z
Updated: 2024-08-06T07:59:00.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7839 |
vulnerable | 2026-06-08 05:07:02.051600 |
Details available
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.
Published: 2015-10-15T20:00:00.000Z
Updated: 2024-09-16T23:35:49.330Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5504 |
vulnerable | 2026-06-08 05:05:48.024164 |
Details available
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.
Published: 2014-09-04T17:00:00.000Z
Updated: 2024-08-06T11:48:49.470Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.