# cve.now: ScienceLogic

The newest entries naming ScienceLogic as an affected vendor (up to 200), of 27 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-58780](https://cve.now/CVE-2025-58780.md): index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. (CVSS 7.2)
- [CVE-2024-9537](https://cve.now/CVE-2024-9537.md): ScienceLogic SL1 unspecified vulnerability (CVSS 9.8, KEV)
- [CVE-2022-48604](https://cve.now/CVE-2022-48604.md): A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input an (CVSS 8.8)
- [CVE-2022-48603](https://cve.now/CVE-2022-48603.md): A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i (CVSS 8.8)
- [CVE-2022-48602](https://cve.now/CVE-2022-48602.md): A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in (CVSS 8.8)
- [CVE-2022-48601](https://cve.now/CVE-2022-48601.md): A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in (CVSS 8.8)
- [CVE-2022-48600](https://cve.now/CVE-2022-48600.md): A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and pa (CVSS 8.8)
- [CVE-2022-48599](https://cve.now/CVE-2022-48599.md): A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in (CVSS 8.8)
- [CVE-2022-48598](https://cve.now/CVE-2022-48598.md): A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controll (CVSS 8.8)
- [CVE-2022-48597](https://cve.now/CVE-2022-48597.md): A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inp (CVSS 8.8)
- [CVE-2022-48596](https://cve.now/CVE-2022-48596.md): A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i (CVSS 8.8)
- [CVE-2022-48595](https://cve.now/CVE-2022-48595.md): A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlle (CVSS 8.8)
- [CVE-2022-48594](https://cve.now/CVE-2022-48594.md): A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i (CVSS 8.8)
- [CVE-2022-48593](https://cve.now/CVE-2022-48593.md): A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i (CVSS 8.8)
- [CVE-2022-48592](https://cve.now/CVE-2022-48592.md): A SQL injection vulnerability exists in the vendor\_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes (CVSS 8.8)
- [CVE-2022-48591](https://cve.now/CVE-2022-48591.md): A SQL injection vulnerability exists in the vendor\_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes u (CVSS 8.8)
- [CVE-2022-48590](https://cve.now/CVE-2022-48590.md): A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐contr (CVSS 8.8)
- [CVE-2022-48589](https://cve.now/CVE-2022-48589.md): A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled in (CVSS 8.8)
- [CVE-2022-48588](https://cve.now/CVE-2022-48588.md): A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controll (CVSS 8.8)
- [CVE-2022-48587](https://cve.now/CVE-2022-48587.md): A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input a (CVSS 8.8)
- [CVE-2022-48586](https://cve.now/CVE-2022-48586.md): A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p (CVSS 8.8)
- [CVE-2022-48585](https://cve.now/CVE-2022-48585.md): A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled inpu (CVSS 8.8)
- [CVE-2022-48584](https://cve.now/CVE-2022-48584.md): A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐cont (CVSS 8.8)
- [CVE-2022-48583](https://cve.now/CVE-2022-48583.md): A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled i (CVSS 8.8)
- [CVE-2022-48582](https://cve.now/CVE-2022-48582.md): A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlle (CVSS 8.8)
- [CVE-2022-48581](https://cve.now/CVE-2022-48581.md): A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input a (CVSS 8.8)
- [CVE-2022-48580](https://cve.now/CVE-2022-48580.md): A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/sciencelogic
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.