Cross-site Scripting in Graylog Server

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-14380 · ADVISORY
• Graylog2/graylog2-server#4904 · WEB
• Graylog2/graylog2-server · PACKAGE
• graylog.org/post/announcing-the-release-of-graylog-2-4-6 · WEB

More vulnerabilities in org.graylog2:graylog2-server

• CVE-2026-69190MEDIUM 6.3Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and da…
• CVE-2026-55867MEDIUM 5.3Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken}…
• CVE-2026-55841HIGH 7.5Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version …
• CVE-2026-55425MEDIUM 5.0Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in g…
• CVE-2025-53106HIGH 8.8Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users …