Security
فارسی
All products

org.graylog2:graylog2-server

Maven · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboardsCVE-2026-69190 · GHSA-M9C2-85GV-8XR5 org.graylog2:graylog2-server Maven Medium Fix reported
Graylog Allows Stored Cross-Site Scripting via Files Plugin and API BrowserGHSA-Q9Q2-3PPX-MWQF org.graylog2:graylog2-server Maven High Fix reported
Graylog vulnerable to instantiation of arbitrary classes triggered by API requestCVE-2024-24824 · GHSA-P6GG-5HF4-4RGJ org.graylog2:graylog2-server Maven High Fix reported
Graylog session fixation vulnerability through cookie injectionCVE-2024-24823 · GHSA-3XF8-G8GR-G7RH org.graylog2:graylog2-server Maven Medium Fix reported
Graylog server has partial path traversal vulnerability in Support Bundle featureCVE-2023-41044 · GHSA-2Q4P-F6GF-MQR5 org.graylog2:graylog2-server Maven Low Fix reported
Graylog user session is still usable after logoutCVE-2023-41041 · GHSA-3FQM-FRHG-7C85 org.graylog2:graylog2-server Maven Low Fix reported
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokensCVE-2026-55867 · GHSA-J769-9GV9-65GR org.graylog2:graylog2-server Maven Medium Fix reported
Fortigate syslog message parser can be exploited to modify or delete fields from the original messageCVE-2026-55841 · GHSA-GQR6-R77P-C2PJ org.graylog2:graylog2-server Maven High Fix reported
Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fieldsCVE-2026-55425 · GHSA-Q79R-R9XG-R863 org.graylog2:graylog2-server Maven Medium Fix reported
Graylog vulnerable to privilege escalation through API tokensCVE-2025-53106 · GHSA-3M86-C9X3-VWM9 org.graylog2:graylog2-server Maven High Fix reported
Graylog Allows Session Takeover via Insufficient HTML SanitizationCVE-2025-46827 · GHSA-76VF-MPMX-777J org.graylog2:graylog2-server Maven High Fix reported
Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong valueCVE-2025-30373 · GHSA-Q7G5-JQ6P-6WVX org.graylog2:graylog2-server Maven Medium Fix reported
Graylog vulnerable to insecure source port usage for DNS queriesCVE-2023-41045 · GHSA-G96C-X7RH-99R3 org.graylog2:graylog2-server Maven Low Fix reported
Cross-site Scripting in Graylog ServerCVE-2018-14380 · GHSA-38HF-XJMX-JRH8 org.graylog2:graylog2-server Maven Medium Fix reported
Cross-site Scripting in GraylogCVE-2018-11651 · GHSA-435G-R2M8-GJVM org.graylog2:graylog2-server Maven Medium Fix reported
Cross-site Scripting in Graylog ServerCVE-2018-11650 · GHSA-H7G4-65MF-6MXH org.graylog2:graylog2-server Maven Medium Fix reported