Sciencelogic Sl1 — known CVE vulnerabilities

Every CVE whose affected-product data names Sciencelogic Sl1, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (26)

• CVE-2024-9537 — CVSS 9.8 (critical) — actively exploited: ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with…
• CVE-2022-48581 — CVSS 8.8 (high): A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled…
• CVE-2022-48582 — CVSS 8.8 (high): A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user…
• CVE-2022-48583 — CVSS 8.8 (high): A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48584 — CVSS 8.8 (high): A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48585 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48586 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled…
• CVE-2022-48587 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled…
• CVE-2022-48588 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48589 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48590 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48591 — CVSS 8.8 (high): A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that…
• CVE-2022-48592 — CVSS 8.8 (high): A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that…
• CVE-2022-48580 — CVSS 8.8 (high): A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled…
• CVE-2022-48594 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48595 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48596 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48597 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48598 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48599 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48600 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input…
• CVE-2022-48601 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48602 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48603 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized…
• CVE-2022-48604 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled…
• CVE-2022-48593 — CVSS 8.8 (high): A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized…