Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Solarwinds Subscribe
Filtered by product Log And Event Manager
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-5198 1 Solarwinds 1 Log And Event Manager 2019-10-02 7.2 HIGH 8.8 HIGH
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.
CVE-2017-5199 1 Solarwinds 1 Log And Event Manager 2019-10-02 6.5 MEDIUM 8.8 HIGH
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
CVE-2015-7840 1 Solarwinds 1 Log And Event Manager 2016-12-02 7.5 HIGH N/A
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
CVE-2015-7839 1 Solarwinds 1 Log And Event Manager 2015-10-16 7.5 HIGH N/A
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.
CVE-2014-5504 1 Solarwinds 1 Log And Event Manager 2014-09-08 7.5 HIGH N/A
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.