Vulnerability index

Browse CVEs

26 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sl1 CRITICAL 9.8
CVE-2024-9537 KEV

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vul…

Fix: 12.1.3 / 12.2.3+
Fix from $2,300 2024-10-18
Sl1 HIGH 8.8
CVE-2022-48601

A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48602

A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48603

A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48604

A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48592

A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsaniti…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48593

A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48594

A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48595

A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input a…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48596

A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48597

A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and pa…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48598

A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48599

A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48600

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it d…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48591

A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitize…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48587

A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48588

A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48589

A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48590

A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inp…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48582

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input a…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48583

A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48584

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48585

A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and pas…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48586

A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it …

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48580

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and…

Fix: after 11.1.2
Fix from $1,950 2023-08-09
Sl1 HIGH 8.8
CVE-2022-48581

A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes…

Fix: after 11.1.2
Fix from $1,950 2023-08-09