Login Request a demo
KS
Product
Kiwi Syslog Server
by Solarwinds · last CVE Oct 29, 2021
5
CVEs
0
On KEV
6.7
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 0
Severity
All severities5Critical0High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kiwi Syslog Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-35231
6.7
0%
Oct 25
As a result of an unquoted service path vulnerability present in the Kiwi Syslog Server Installation Wizard, a local attacker could gain escalated privileges by inserting an…
Affected: before 9.8
CVE-2021-35236
5.3
1%
Oct 27
The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions
Affected: through 9.7.2
CVE-2021-35235
5.3
1%
Oct 27
The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions
Affected: through 9.7.2
CVE-2021-35233
5.3
1%
Oct 27
The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier
Affected: through 9.7.2
CVE-2021-35237
4.3
1%
Oct 29
A missing HTTP header (X-Frame-Options) in Kiwi Syslog Server has left customers vulnerable to click jacking
Affected: through 9.7.2
Showing 5