← Back

Log And Event Manager

log_and_event_manager

Vendor: Solarwinds • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-5199
1Solarwinds
1Log And Event Manager
May 13, 2026
Mar 24, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
CVE-2017-5198
1Solarwinds
1Log And Event Manager
May 13, 2026
Mar 24, 2017
N/A· v4
8.8 HIGH· v3
7.2 HIGH· v2
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.
CVE-2015-7840
1Solarwinds
1Log And Event Manager
May 6, 2026
Oct 15, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
CVE-2015-7839
1Solarwinds
1Log And Event Manager
May 6, 2026
Oct 15, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.
CVE-2014-5504
1Solarwinds
1Log And Event Manager
May 6, 2026
Sep 4, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.