CVE-2025-61949mediumCWE-79

CVE-2025-61949: medium-severity vulnerability in LogStare Collector (for Linux)

Published

Follow this CVE+ Monitor LogStare Collector

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.2%
LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
LogStare Inc. · LogStare Collector (for Linux)LogStare Inc. · LogStare Collector (for Windows)
Related CVEs — LogStare Collector (for Linux)

In the same product, most dangerous first.

CVE-2025-64299MEDIUMCVE-2025-64299EPSS 0.3%CVE-2025-62189MEDIUMCVE-2025-62189EPSS 0.2%CVE-2025-62687MEDIUMCVE-2025-62687EPSS 0.2%CVE-2025-58097MEDIUMCVE-2025-58097EPSS 0.1%