Unified SecOps Platform vulnerabilities

12 known vulnerabilities in Unified SecOps Platform from Logsign. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Unified SecOps Platform: Improper Authentication

  CVE-2025-1044Feb 11, 2025LogsignEPSS 75.3%

  Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability.

• 8.8 High severity

  Unified SecOps Platform: Use of Hard-coded Credentials

  CVE-2024-5722Nov 22, 2024LogsignEPSS 1.1%

  Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authenticati

• 8.1 High severity

  Unified SecOps Platform: Missing Authentication for Critical Functionality

  CVE-2024-5721Nov 22, 2024LogsignEPSS 6%

  Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exp

• 8.8 High severity

  Unified SecOps Platform: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5720Nov 22, 2024LogsignEPSS 2.66%

  Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exp

• 8.8 High severity

  Unified SecOps Platform: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5719Nov 22, 2024LogsignEPSS 2.66%

  Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exp

• 8.1 High severity

  Unified SecOps Platform: Missing Authentication for Critical Functionality

  CVE-2024-5718Nov 22, 2024LogsignEPSS 1.49%

  Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exp

• 8.8 High severity

  Unified SecOps Platform: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5717Nov 22, 2024LogsignEPSS 2.95%

  Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exp

• 9.8 Critical severity

  Unified SecOps Platform: Improper Restriction of Excessive Authentication Attempts

  CVE-2024-5716Nov 22, 2024LogsignEPSS 1.59%

  Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability.

• 7.8 High severity

  Unified SecOps Platform: Incorrect Authorization

  CVE-2024-7604Aug 21, 2024Logsign

  Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit

• 8.1 High severity

  Unified SecOps Platform: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-7603Aug 21, 2024LogsignEPSS 2.02%

  Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary directories on affected installations of Logsign Unified SecOps Platform. Authentication is required

• 8.1 High severity

  Unified SecOps Platform: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-7601Aug 21, 2024LogsignEPSS 1.62%

  Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication

• 8.1 High severity

  Unified SecOps Platform: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-7600Aug 21, 2024LogsignEPSS 2.02%

  Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit