Approved changes feed: RSS · Atom

cpe:2.3:a:logpoint:siem:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLogpoint (d2ffb7f2-f585-57a3-9d43-dc40b3f35e32)
ProductSiem (b4f4f447-e661-5986-8747-ae748de0f53d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-66361 vulnerable 2026-06-08 07:41:18.786314 Details available
An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load.
Published: 2025-11-27T00:00:00.000Z
Updated: 2025-11-28T19:34:43.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66360 vulnerable 2026-06-08 07:41:18.786049 Details available
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
Published: 2025-11-27T00:00:00.000Z
Updated: 2025-11-28T19:34:48.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66359 vulnerable 2026-06-08 07:41:18.785721 Details available
HIGH (8.5)
An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.
Published: 2025-11-27T00:00:00.000Z
Updated: 2025-11-28T19:34:37.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56087 vulnerable 2026-06-08 06:54:17.432273 Details available
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection.
Published: 2024-12-16T00:00:00.000Z
Updated: 2024-12-16T15:58:55.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56086 vulnerable 2026-06-08 06:54:17.431811 Details available
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution.
Published: 2024-12-16T00:00:00.000Z
Updated: 2024-12-16T15:57:09.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56085 vulnerable 2026-06-08 06:54:17.431296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48954 vulnerable 2026-06-08 06:50:11.760582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48953 vulnerable 2026-06-08 06:50:11.760094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48951 vulnerable 2026-06-08 06:50:11.757311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48950 vulnerable 2026-06-08 06:50:11.756844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33860 vulnerable 2026-06-08 06:37:32.213145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33859 vulnerable 2026-06-08 06:37:32.212548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33858 vulnerable 2026-06-08 06:37:32.212083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33857 vulnerable 2026-06-08 06:37:32.211639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33856 vulnerable 2026-06-08 06:37:32.211139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30176 vulnerable 2026-06-08 06:35:29.137275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29865 vulnerable 2026-06-08 06:33:29.468110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49950 vulnerable 2026-06-08 06:16:10.818305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48685 vulnerable 2026-06-08 05:51:34.920892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48684 vulnerable 2026-06-08 05:51:34.919156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.