Advisories · Technology

ELOG.

Every CVE that names ELOG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-64349 CVE record

CVSS 8.7 High

ELOG user profile missing authorization
- ELOG
- Broken access control
Not analysed yet 31 Oct 2025
CVE-2025-64348 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

ELOG configuration file authorization bypass
- ELOG
- Broken access control
Not analysed yet 31 Oct 2025
CVE-2025-62618 CVE record

CVSS 8.6 High

ELOG file upload stored XSS
- ELOG
- Cross-site scripting (XSS)
- Unrestricted file upload
Not analysed yet 31 Oct 2025
CVE-2019-3996 CVE record

ELOG: ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when…
- ELOG
- CWE-441
Not analysed yet 17 Dec 2019
CVE-2019-3995 CVE record

NULL pointer dereference in ELOG
- ELOG
- Memory corruption
Not analysed yet 17 Dec 2019
CVE-2019-3994 CVE record

Use after free in ELOG
- ELOG
- Memory corruption
Not analysed yet 17 Dec 2019
CVE-2019-3993 CVE record

Information disclosure in ELOG
- ELOG
- Information disclosure
Not analysed yet 17 Dec 2019
CVE-2019-3992 CVE record

Information disclosure in ELOG
- ELOG
- Information disclosure
Not analysed yet 17 Dec 2019