Nxlog Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:nxlog:nxlog_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nxlog (1aecd26e-e291-5f90-aa5d-f63f4ec0cb88) |
|---|---|
| Product | Nxlog Manager (656a8099-e013-5cb5-9775-82970d2d55fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32792 |
vulnerable | 2026-06-08 06:04:47.224841 |
Cross-Site Request Forgery on NXLog Manager
MEDIUM (6.5)
Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. The vulnerability is based on the absence of proper validation of the origin of incoming requests.
Published: 2023-10-03T12:47:49.496Z
Updated: 2024-09-05T18:16:01.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32791 |
vulnerable | 2026-06-08 06:04:47.224442 |
Cross-Site Request Forgery on NXLog Manager
MEDIUM (6.5)
Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. The vulnerability is based on the lack of proper validation of the origin of incoming requests.
Published: 2023-10-03T12:43:01.043Z
Updated: 2024-09-06T14:09:28.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32790 |
vulnerable | 2026-06-08 06:04:47.222831 |
XSS on NXLog Manager
MEDIUM (4.6)
Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.
Published: 2023-10-03T12:40:23.607Z
Updated: 2024-09-05T18:16:20.555Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.