Solarwinds Log And Event Manager
5 CVEs affecting Solarwinds Log And Event Manager. Latest disclosed: 2017-03-24. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5199 | High | 8.8 | 2017-03-24 | The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scr… |
CVE-2017-5198 | High | 8.8 | 2017-03-24 | SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/script… |
CVE-2015-7840 | | 2015-10-15 | The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecif… | |
CVE-2015-7839 | | 2015-10-15 | SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonse… | |
CVE-2014-5504 | | 2014-09-04 | SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute… |