LS
Product
Log Server
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 13Low 0
Watch
Add Log Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-34298 | 8.8 | Oct 30 | Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation Affected: before 2024R1.3.2 |
| CVE-2025-44823 | 8.8 | Oct 7 | Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call Affected: before 2024R1.3.2 |
| CVE-2025-29471 | 8.3 | Apr 15 | Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field Affected: 2024 |
| CVE-2023-7322 | 8.1 | Oct 30 | Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access Affected: before 2024R1 |
| CVE-2025-34323 | 7.8 | Nov 17 | Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules Affected: before 2026R1.0.1 |
| CVE-2024-58273 | 7.8 | Oct 30 | Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root Affected: before 2024R1.0.2 |
| CVE-2025-34322 | 7.2 | Nov 17 | Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries Affected: before 2026R1.0.1 |
Showing 7
