Advisories · Weakness
CWE-778.
Every Advisory and CVE whose sources give the weakness CWE-778, newest first.
- CVSS 2.7 Low
Tanium addressed an insufficient logging vulnerability in Tanium Server.
- Tanium Server
- CWE-778
- CVSS 2.1 Low
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses
- openbao
- CWE-778
- CVSS 7.5 High
Insufficient authentication logging in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- CWE-778
- CVSS 5.3 Medium
Apache log4net: Oversize EventLogAppender record silently discarded
- Apache Software Foundation Apache log4net
- CWE-778
- CVSS 4.3 Medium
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- IBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CWE-778
- CVSS 5.1 Medium
MISP: Authentication failure logging suppressed during Redis unavailability
- MISP
- CWE-778
- CVSS 5.3 Medium
MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass
- MISP
- CWE-223
- CWE-778
- CVSS 4.6 Medium
MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load
- MISP
- CWE-223
- CWE-778
- CVSS 4.3 Medium
CyberPanel: CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the…
- CyberPanel
- CWE-778
- CVSS 6.5 Medium
Microsoft SQL Server Security Feature Bypass Vulnerability
- Microsoft SQL Server 2022 (CU 26)
- Microsoft SQL Server 2022 (GDR)
- CWE-778
- CVSS 6.8 Medium
Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline
- rocq
- CWE-778
- CVSS 5.4 Medium
HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
- HCL Software IEM
- CWE-778
- CVSS 8.8 High
phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
- thorsten phpMyFAQ
- CWE-778
- CVSS 2.7 LowCritical · KEVKEV
ESX insufficient logging vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- CWE-778
- CVSS 2.4 Low
Devolutions Server: Insufficient logging in the entry export feature in Devolutions Server allows an…
- Devolutions Server
- CWE-778
- CVSS 8.7 High
@hulumi/baseline: CloudTrail selector tampering events were not fully detected
- CWE-778
<1.3.2 · fixed in 1.3.2
GHSA-gfp8-mp24-5vxg · CVE-2026-82863 - CVSS 3.3 Low
Dell PowerScale OneFS: Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13…
- Dell PowerScale OneFS
- CWE-778
- CVSS 8.8 High
Juju has unauthorized access to out-of-scope Kubernetes secrets
- Broken access control
- CWE-778
>=0.0.0-20221021155847-35c560704ee2, <0.0.0-20260319091847-d06919eb03ec · fixed in 0.0.0-20260319091847-d06919eb03ec
GHSA-439w-v2p7-pggc · CVE-2026-32693 - CVSS 5.8 Medium
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.
- HCL AION
- CWE-778
- CVSS 5.3 Medium
MariaDB Server Audit Plugin Comment Handling Bypass
- MariaDB Foundation MariaDB Server
- Amazon Aurora MySQL
- CWE-778
- CVSS 6.3 Medium
Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)
- step-security harden-runner
- CWE-778
- CVSS 4.3 Medium
Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability.
- Dell PowerScale OneFS
- CWE-778
- CVSS 4.3 Medium
Nextcloud Server admin_audit does not log all actions on files in groupfolders
- nextcloud security-advisories
- CWE-778
- CVSS 5.3 Medium
Lack of Audit Logging in AbuseFilter
- Wikimedia Foundation Mediawiki - AbuseFilter Extension
- CWE-778
- CVSS 5.4 Medium
OpenEMR doesn't log password administration properly
- openemr
- CWE-778
- CVSS 5.4 Medium
Devolutions Remote Desktop Manager: Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on…
- Devolutions Remote Desktop Manager
- CWE-778
- CVSS 5.1 Medium
Client-side audit exclusion vulnerability
- OpenText Secure Content Manager
- CWE-778
- CVSS 10.0 CriticalCritical · CVSS 9+
Life2000 ventilator and Service PC lack sufficient audit logging capabilities
- Baxter Life2000 Ventilation System
- CWE-778
- CVSS 4.3 Medium
MOVEit Transfer Logging Bypass Vulnerability
- Progress Software MOVEit Transfer
- CWE-778
- CVSS 3.0 Low
Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability.
- Dell PowerScale OneFS
- CWE-778
- CVSS 7.5 High
An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.
- CWE-778
- CVSS 5.3 Medium
Insufficient Logging Vulnerability in HiRDB
- Hitachi HiRDB Server
- Hitachi HiRDB Server With Addtional Function
- CWE-778
- CVSS 3.6 Low
Fortinet FortiSandbox: An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2…
- Fortinet FortiSandbox
- Fortinet FortiDeceptor
- CWE-778
- CVSS 2.1 Low
Federated share accepting/declining is not logged in audit log in Nextcloud Server
- nextcloud security-advisories
- CWE-778
- CVSS 5.3 Medium
Magento 2 Community Edition Insufficient Logging
- CWE-778
>=2.1.0, <2.1.19 || >=2.2.0, <2.2.10 || >=2.3.0, <2.3.3 · fixed in 2.1.19, 2.2.10, 2.3.3
GHSA-fp5m-4mqh-849p · CVE-2019-8123 - CVSS 4.3 Medium
Hacking attempts from logged-in users are not properly logged by GM
- Secomea GateManager
- CWE-778
- CVSS 3.5 Low
When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is created.
- SAP SE SAP NetWeaver AS JAVA (Administrator applications)
- CWE-778
- CVSS 3.3 Low
Audit log is not properly logging unsetting of share expiration date
- nextcloud security-advisories
- CWE-778
- CVSS 4.3 Medium
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0).
- Siemens Control Center Server (CCS)
- CWE-778
-
A vulnerability has been identified in SIPORT MP (All versions < 3.1.4).
- Siemens AG SIPORT MP
- CWE-778
-
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw.
- Elastic Logstash
- CWE-778