ZeroHour

CVE-2025-58580

CVSS 3.1
5.3 medium
EPSS
<1%p30
Published
()
Modified
Description

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

Vendors
sick
Products
enterprise analytics
Weakness
CWE-117
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

In the news

No ingested article mentions this CVE yet.