{"items":[{"id":"CVE-2025-58780","published":"2025-09-05T00:00:00.000Z","updated":"2025-09-08T20:44:05.246Z","title":"index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it \"inaccurately…","severity":"HIGH","score":7.2,"vendor":"ScienceLogic","product":"SL1","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2024-9537","published":"2024-10-18T14:45:02.147Z","updated":"2025-10-21T22:55:42.397Z","title":"ScienceLogic SL1 unspecified vulnerability","severity":"CRITICAL","score":9.3,"vendor":"ScienceLogic","product":"SL1","kev":true,"epss":0.03826,"kevAdded":"2024-10-21"},{"id":"CVE-2022-48604","published":"2023-08-09T18:35:32.937Z","updated":"2024-10-10T12:48:06.441Z","title":"A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48603","published":"2023-08-09T18:34:48.333Z","updated":"2024-10-10T12:48:32.241Z","title":"A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48602","published":"2023-08-09T18:33:39.915Z","updated":"2024-10-10T12:48:53.896Z","title":"A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48601","published":"2023-08-09T18:32:30.423Z","updated":"2024-10-09T20:45:22.897Z","title":"A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48600","published":"2023-08-09T18:28:29.476Z","updated":"2024-10-09T20:48:30.146Z","title":"A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48599","published":"2023-08-09T18:26:24.798Z","updated":"2024-10-09T20:50:26.916Z","title":"A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48598","published":"2023-08-09T18:25:02.473Z","updated":"2024-10-10T18:22:22.939Z","title":"A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48597","published":"2023-08-09T18:23:45.708Z","updated":"2024-10-10T14:39:47.269Z","title":"A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48596","published":"2023-08-09T18:21:34.551Z","updated":"2024-10-10T14:40:43.223Z","title":"A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48595","published":"2023-08-09T18:19:24.967Z","updated":"2024-10-10T14:41:13.157Z","title":"A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48594","published":"2023-08-09T18:18:03.553Z","updated":"2024-10-10T12:49:18.686Z","title":"A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48593","published":"2023-08-09T18:14:54.986Z","updated":"2024-10-10T14:42:26.114Z","title":"A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00719,"kevAdded":null},{"id":"CVE-2022-48592","published":"2023-08-09T18:09:37.218Z","updated":"2024-10-10T14:42:58.694Z","title":"A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48591","published":"2023-08-09T18:04:59.797Z","updated":"2024-10-10T14:43:43.839Z","title":"A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48590","published":"2023-08-09T17:57:42.896Z","updated":"2024-10-10T14:45:17.570Z","title":"A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48589","published":"2023-08-09T17:54:20.181Z","updated":"2024-10-10T14:46:02.450Z","title":"A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48588","published":"2023-08-09T17:47:49.705Z","updated":"2024-10-10T14:46:51.043Z","title":"A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00719,"kevAdded":null},{"id":"CVE-2022-48587","published":"2023-08-09T17:46:05.699Z","updated":"2024-10-10T14:49:15.668Z","title":"A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48586","published":"2023-08-09T17:44:56.747Z","updated":"2024-10-10T14:49:50.480Z","title":"A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48585","published":"2023-08-09T17:42:14.525Z","updated":"2024-10-10T14:50:45.147Z","title":"A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-48584","published":"2023-08-09T17:29:49.944Z","updated":"2024-10-10T14:51:50.315Z","title":"A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.01561,"kevAdded":null},{"id":"CVE-2022-48583","published":"2023-08-09T17:13:54.494Z","updated":"2024-10-10T14:52:38.496Z","title":"A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.01561,"kevAdded":null},{"id":"CVE-2022-48582","published":"2023-08-09T17:11:15.231Z","updated":"2024-10-10T14:53:17.188Z","title":"A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.01561,"kevAdded":null},{"id":"CVE-2022-48581","published":"2023-08-09T17:08:11.636Z","updated":"2024-10-10T14:53:54.089Z","title":"A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.01587,"kevAdded":null},{"id":"CVE-2022-48580","published":"2023-08-09T17:02:24.923Z","updated":"2024-10-10T14:54:53.574Z","title":"A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it…","severity":"HIGH","score":8.8,"vendor":"ScienceLogic","product":"SL 1","kev":false,"epss":0.01548,"kevAdded":null}]}