Cross-Site Scripting Vulnerability in Logpoint Software
CVE-2025-66359

8.5HIGH

Key Information:

Vendor

Logpoint

Status
Siem
Vendor
CVE Published:
27 November 2025

What is CVE-2025-66359?

A cross-site scripting vulnerability exists in Logpoint software prior to version 7.7.0 due to insufficient input validation and a lack of output escaping in multiple components. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users, potentially compromising user sessions and exposing sensitive information.

Affected Version(s)

SIEM 0 < 7.7.0

References

https://servicedesk.logpoint.com/hc/en-us/articles/291588...

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.