Logstare Inc. Logstare Collector (For Windows)
5 CVEs affecting Logstare Inc. Logstare Collector (For Windows). Latest disclosed: 2025-11-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-58097 | High | 7.8 | 2025-11-21 | The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the ins… |
CVE-2025-62687 | Medium | 6.5 | 2025-11-21 | Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed. |
CVE-2025-61949 | Medium | 5.4 | 2025-11-21 | LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be ex… |
CVE-2025-62189 | Medium | 4.3 | 2025-11-21 | LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account… |
CVE-2025-64299 | Low | 2.7 | 2025-11-21 | LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes. |