Logpoint

6 CVEs across 6 Logpoint products. Browse Logpoint vulnerabilities, severities, and proof-of-concept exploits.

Logpoint products with known CVEs

ProductCVEs
Siem20
Logpoint2
Agentx1
Saml Authentication1
Soar1
Universal Normalizer1
Logpoint CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66361Medium6.52025-11-28An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load.
CVE-2025-66360High8.82025-11-28An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) informatio…
CVE-2025-66359High8.52025-11-28An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scri…
CVE-2025-54317High8.42025-07-20An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Templa…
CVE-2025-54316Medium4.92025-07-20An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to…
CVE-2025-267892025-02-14An issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access controls allowed li-admin users to access sensitive informati…
CVE-2024-56087Medium5.92024-12-16An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading…
CVE-2024-56086High7.12024-12-16An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is in…
CVE-2024-56085Medium5.92024-12-16An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading…
CVE-2024-56084High7.12024-12-16An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are ex…
CVE-2024-48954Medium6.42024-11-07An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution.
CVE-2024-48953High7.52024-11-07An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization c…
CVE-2024-48952Medium6.42024-11-07An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authenti…
CVE-2024-48951High7.52024-11-07An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoint's API Token leading to authentication…
CVE-2024-48950High7.52024-11-07An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF…
CVE-2024-36383Medium5.32024-05-27An issue was discovered in Logpoint SAML Authentication before 6.0.3. An attacker can place a crafted filename in the state field of a SAML SSO-URL response, a…
CVE-2024-33860Medium6.52024-05-07An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. Th…
CVE-2024-33859Medium6.12024-05-07An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting Field" Web UI, leading to XSS.
CVE-2024-33858Medium5.32024-05-07An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment source. The source_name parameter could…
CVE-2024-33857Critical9.62024-05-07An issue was discovered in Logpoint before 7.4.0. Due to a lack of input validation on URLs in threat intelligence, an attacker with low-level access to the sy…
CVE-2024-33856Medium5.32024-05-07An issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of usernames by observing the response time at the Forgot Password end…
CVE-2024-30176Medium5.32024-05-01In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets.
CVE-2022-48685High7.72024-04-27An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file clean_secbi_old_logs is writable by all users and is executed as root, leadi…
CVE-2022-48684High8.42024-04-27An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating…
CVE-2024-29865Medium5.42024-03-22Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form.
CVE-2023-49950Medium5.42024-02-03The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template i…