sl1 vulnerabilities and fixes

Recent CVEs affecting sl1, with upgrade or downgrade steps. 26 tracked.

sl1 has 26 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 26. Most recent: 2024-10-18. Highest priority: CVE-2024-9537 (score 90/100).

• CVE-2024-9537 CRITICAL 9.8 EXPLOITED UPGRADE ScienceLogic SL1 Unspecified Vulnerability
• CVE-2022-48604 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsani
• CVE-2022-48603 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes
• CVE-2022-48602 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes
• CVE-2022-48601 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes
• CVE-2022-48600 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitize
• CVE-2022-48599 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes
• CVE-2022-48598 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that t
• CVE-2022-48597 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes u
• CVE-2022-48596 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes
• CVE-2022-48595 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that ta
• CVE-2022-48594 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes
• CVE-2022-48593 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes
• CVE-2022-48592 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of t
• CVE-2022-48591 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the
• CVE-2022-48590 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 tha
• CVE-2022-48589 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes
• CVE-2022-48588 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that t
• CVE-2022-48587 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsan
• CVE-2022-48586 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitiz
• CVE-2022-48585 HIGH 8.8 UPGRADE A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes un
• CVE-2022-48584 HIGH 8.8 UPGRADE A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 th
• CVE-2022-48583 HIGH 8.8 UPGRADE A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes
• CVE-2022-48582 HIGH 8.8 UPGRADE A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that ta
• CVE-2022-48581 HIGH 8.8 UPGRADE A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsan
• CVE-2022-48580 HIGH 8.8 UPGRADE A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that take

FAQ

How do I fix sl1 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sl1 being exploited right now?

Yes: 1 sl1 CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which sl1 CVE should I patch first?

CVE-2024-9537 currently ranks highest (90/100): ScienceLogic SL1 Unspecified Vulnerability.

RSS feed for sl1 · ← Back to latest CVEs