CVE-2018-19877
Medium · 6.1CVSS
6.1
EPSS
18.6%
Published
Dec 5, 2018
CISA due date
—
The record
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | loganalyzer | 0 | No fix |
| Ubuntu:18.04:LTS | loganalyzer | 0 | No fix |
| Ubuntu:20.04:LTS | loganalyzer | 0 | No fix |
| Ubuntu:22.04:LTS | loganalyzer | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | loganalyzer | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | loganalyzer | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | loganalyzer | 0 | No fix |
Related vulnerabilities
- CVE-2023-34600 Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. Also affects loganalyzer
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96368 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96361 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96362 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96360 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96357 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79