Logpoint vulnerabilities
Published CVEs affecting Logpoint products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-66359
Medium · 6.1
CWE-79 Nov 27, 2025
Cross-site Scripting (XSS) in Logpoint Siem
An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.
CVE-2025-66361
Medium · 6.5
CWE-1336 Nov 27, 2025
An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in…
An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load.
CVE-2025-66360
High · 8.8
CWE-863 Nov 27, 2025
Incorrect Authorization in Logpoint Siem
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.