本ページは logpoint siem に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-66361 | An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load. | [email protected] | 6.9 | 0.24% | 2025-11-28 | 2025-12-03 |
| CVE-2025-66360 | An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation. | [email protected] | 6.9 | 0.25% | 2025-11-28 | 2025-12-03 |
| CVE-2025-66359 | An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability. | [email protected] | 8.5 | 0.16% | 2025-11-28 | 2025-12-03 |
| CVE-2024-56087 | An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection. | [email protected] | 5.9 | 0.28% | 2024-12-16 | 2025-04-17 |
| CVE-2024-56086 | An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution. | [email protected] | 7.1 | 0.40% | 2024-12-16 | 2025-04-17 |
| CVE-2024-56085 | An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection. | [email protected] | 5.9 | 0.28% | 2024-12-16 | 2025-04-17 |
| CVE-2024-48954 | An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution. | [email protected] | 6.4 | 0.42% | 2024-11-07 | 2025-04-30 |
| CVE-2024-48953 | An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access. | [email protected] | 7.5 | 0.32% | 2024-11-07 | 2025-04-30 |
| CVE-2024-48951 | An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoint's API Token leading to authentication bypass. | [email protected] | 7.5 | 0.31% | 2024-11-07 | 2025-04-30 |
| CVE-2024-48950 | An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication. | [email protected] | 7.5 | 0.32% | 2024-11-07 | 2025-04-18 |
| CVE-2024-33860 | An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. The content of the file specified can be viewed in the incoming logs. | [email protected] | 6.5 | 0.45% | 2024-05-07 | 2025-04-18 |
| CVE-2024-33859 | An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting Field" Web UI, leading to XSS. | [email protected] | 6.1 | 0.31% | 2024-05-07 | 2025-04-18 |
| CVE-2024-33858 | An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment source. The source_name parameter could be changed to an absolute path; this will write the CSV file to that path inside the /tmp directory. | [email protected] | 5.3 | 0.49% | 2024-05-07 | 2025-04-18 |
| CVE-2024-33857 | An issue was discovered in Logpoint before 7.4.0. Due to a lack of input validation on URLs in threat intelligence, an attacker with low-level access to the system can trigger Server Side Request Forgery. | [email protected] | 9.6 | 0.40% | 2024-05-07 | 2025-04-18 |
| CVE-2024-33856 | An issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of usernames by observing the response time at the Forgot Password endpoint. | [email protected] | 5.3 | 0.37% | 2024-05-07 | 2025-04-18 |
| CVE-2024-30176 | In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets. | [email protected] | 5.3 | 0.38% | 2024-05-01 | 2025-04-22 |
| CVE-2022-48685 | An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file clean_secbi_old_logs is writable by all users and is executed as root, leading to privilege escalation. | [email protected] | 7.7 | 0.17% | 2024-04-27 | 2025-04-18 |
| CVE-2022-48684 | An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search template can leverage this to execute code as the loginspect user. | [email protected] | 8.4 | 0.64% | 2024-04-27 | 2025-04-18 |
| CVE-2024-29865 | Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form. | [email protected] | 5.4 | 0.31% | 2024-03-22 | 2025-04-16 |
| CVE-2023-49950 | The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template in the Alert view. A remote attacker can craft a cross-site scripting (XSS) payload and send it to any system or device that sends logs to the SIEM. If an alert is created, the payload will execute upon the alert data being viewed with that template, which can lead to sensitive data disclosure. | [email protected] | 5.4 | 0.51% | 2024-02-03 | 2025-06-17 |