CVE-2025-64299Medium 4.9LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.0.3%
CVE-2025-62687Medium 6.5Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.0.2%
CVE-2025-62189Medium 4.3LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.0.2%
CVE-2025-61949Medium 5.4LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who0.2%
CVE-2025-58097Medium 5.5The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary0.1%