GCVE - cpe:2.3:a:logpoint:logpoint:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:logpoint:logpoint:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Logpoint (`d2ffb7f2-f585-57a3-9d43-dc40b3f35e32`)
Product	Logpoint (`793544e9-385a-59e8-8b30-4eb40dd39761`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-54317`	vulnerable	2026-06-08 07:33:12.346611	Details available HIGH (8.4) An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Template, which can lead to remote code execution (RCE). Published: 2025-07-20T00:00:00.000Z Updated: 2025-07-30T15:48:58.857Z Open on db.gcve.eu Reference links https://servicedesk.logpoint.com/hc/en-us/articles/28685507675549-Path-Traversal-in-Layout-Templates-Allows-Remote-Code-Execution https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-54316`	vulnerable	2026-06-08 07:33:12.346316	Details available MEDIUM (4.9) An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting (XSS) attacks. Published: 2025-07-20T00:00:00.000Z Updated: 2025-07-30T15:48:29.616Z Open on db.gcve.eu Reference links https://servicedesk.logpoint.com/hc/en-us/articles/28685383084317-XSS-vulnerability-in-Report-Templates-using-built-in-Jinja-filter-functions https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48954`	vulnerable	2026-06-08 06:50:11.760412	Details available An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution. Published: 2024-11-07T00:00:00.000Z Updated: 2024-11-07T20:12:06.058Z Open on db.gcve.eu Reference links https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security https://servicedesk.logpoint.com/hc/en-us/articles/21968851138461-Remote-Code-Execution-RCE-in-EventHub-Collector	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48953`	vulnerable	2026-06-08 06:50:11.760018	Details available An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access. Published: 2024-11-07T00:00:00.000Z Updated: 2024-11-07T20:15:39.950Z Open on db.gcve.eu Reference links https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security https://servicedesk.logpoint.com/hc/en-us/articles/21968899128221-Authentication-Bypass-using-URL-endpoints-in-the-Authentication-Modules	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48951`	vulnerable	2026-06-08 06:50:11.757238	Details available An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoint's API Token leading to authentication bypass. Published: 2024-11-07T00:00:00.000Z Updated: 2024-11-07T20:05:51.201Z Open on db.gcve.eu Reference links https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security https://servicedesk.logpoint.com/hc/en-us/articles/21968916591261-Server-Side-Request-Forgery-SSRF-on-SOAR-results-in-authentication-bypass	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48950`	vulnerable	2026-06-08 06:50:11.755605	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-30176`	vulnerable	2026-06-08 06:35:29.136097	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-48684`	vulnerable	2026-06-08 05:51:34.918029	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.