Login Request a demo
LA
Product
Log And Event Manager
by Solarwinds · last CVE Mar 24, 2017
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities5Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Log And Event Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-5199
8.8
3%
Mar 24
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl
Affected: through 6.3.1
CVE-2017-5198
8.8
1%
Mar 24
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh
Affected: before 6.3.1
CVE-2015-7840
–
4%
Oct 15
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors…
Affected: through 6.1
CVE-2015-7839
–
7%
Oct 15
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf…
Affected: All versions, or not specified
CVE-2014-5504
–
5%
Sep 4
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via…
Affected: through 5.7.0; 5.2.0; 5.4.0; 5.5.0; 5.6.0
Showing 5