ScienceLogic vulnerabilities
27 published CVEs name ScienceLogic among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 27
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 1
Critical 1High 26Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 202325
- 20241
- 20251
Known exploitedNewest addition to KEV first
- CVE-2024-9537
ScienceLogic SL1 unspecified vulnerability
ScienceLogic · SL1
ExploitedCritical9.3
Newest CVEs
- CVE-2025-58780
index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately…
ScienceLogic · SL1
High7.2 - CVE-2024-9537
ScienceLogic SL1 unspecified vulnerability
ScienceLogic · SL1
ExploitedCritical9.3 - CVE-2022-48604
A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…
ScienceLogic · SL 1
High8.8 - CVE-2022-48603
A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…
ScienceLogic · SL 1
High8.8 - CVE-2022-48602
A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…
ScienceLogic · SL 1
High8.8 - CVE-2022-48601
A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…
ScienceLogic · SL 1
High8.8 - CVE-2022-48600
A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to…
ScienceLogic · SL 1
High8.8 - CVE-2022-48599
A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…
ScienceLogic · SL 1
High8.8 - CVE-2022-48598
A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…
ScienceLogic · SL 1
High8.8 - CVE-2022-48597
A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…
ScienceLogic · SL 1
High8.8