Logsign vulnerabilities

We track 12 vulnerabilities in Logsign products across 2 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2025.

12vulnerabilities

2critical

10high

0exploited

8.6average CVSS score

Latest Logsign vulnerabilities

9.8 Critical severity
Unified SecOps Platform: Improper Authentication
CVE-2025-1044Feb 11, 2025LogsignEPSS 75.3%
Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability.
8.8 High severity
Unified SecOps Platform: Use of Hard-coded Credentials
CVE-2024-5722Nov 22, 2024LogsignEPSS 1.1%
Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authenticati
8.1 High severity
Unified SecOps Platform: Missing Authentication for Critical Functionality
CVE-2024-5721Nov 22, 2024LogsignEPSS 6%
Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exp
8.8 High severity
Unified SecOps Platform: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-5720Nov 22, 2024LogsignEPSS 2.66%
Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exp
8.8 High severity
Unified SecOps Platform: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-5719Nov 22, 2024LogsignEPSS 2.66%
Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exp
8.1 High severity
Unified SecOps Platform: Missing Authentication for Critical Functionality
CVE-2024-5718Nov 22, 2024LogsignEPSS 1.49%
Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exp
8.8 High severity
Unified SecOps Platform: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-5717Nov 22, 2024LogsignEPSS 2.95%
Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exp
9.8 Critical severity
Unified SecOps Platform: Improper Restriction of Excessive Authentication Attempts
CVE-2024-5716Nov 22, 2024LogsignEPSS 1.59%
Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability.
7.8 High severity
Unified SecOps Platform: Incorrect Authorization
CVE-2024-7604Aug 21, 2024Logsign
Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit
8.1 High severity
Unified SecOps Platform: Improper Limitation of a Pathname to a Restricted Directory
CVE-2024-7603Aug 21, 2024LogsignEPSS 2.02%
Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary directories on affected installations of Logsign Unified SecOps Platform. Authentication is required
8.1 High severity
Unified SecOps Platform: Improper Limitation of a Pathname to a Restricted Directory
CVE-2024-7601Aug 21, 2024LogsignEPSS 1.62%
Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication
8.1 High severity
Unified SecOps Platform: Improper Limitation of a Pathname to a Restricted Directory
CVE-2024-7600Aug 21, 2024LogsignEPSS 2.02%
Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit