CWE-778: Insufficient Logging
When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.
A kind of CWE-223 Omission of Security-relevant Information.
From the CWE List. © The MITRE Corporation.
Newest
- tanium server Tanium addressed an insufficient logging vulnerability in Tanium Server. 2.7 Low
- openbao OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses 2.1 Low
- progress software corporation marklogic server Insufficient authentication logging in Progress MarkLogic Server 7.5 High
- apache log4net Apache log4net: Oversize EventLogAppender record silently discarded 5.3 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 more IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities 4.3 Medium
- misp MISP: Authentication failure logging suppressed during Redis unavailability 5.1 Medium
- misp MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass 5.3 Medium
- misp MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load 4.6 Medium
- cyberpanel CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child... 4.3 Medium
- microsoft sql server 2022 (cu 26), sql server 2022 (gdr), sql server 2025 (cu8) +3 more +5 more Microsoft SQL Server Security Feature Bypass Vulnerability 6.5 Medium
- rocq-prover rocq Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline 6.8 Medium
- hcl software iem HCL IntelliOps Event Management is affected by multiple security vulnerabilities. 5.4 Medium
- phpmyfaq phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP 8.8 High
- broadcom vmware esx, vmware esx, cloud foundation +3 more +5 more ESX insufficient logging vulnerability 2.7 Low
- devolutions server Insufficient logging in the entry export feature in Devolutions Server allows an authenticated... 2.4 Low
- hulumi baseline @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection 8.7 High
- dell powerscale onefs Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through... 3.3 Low
- canonical juju Unauthorized access to Kubernetes secrets in Juju 8.8 High
- hcl aion HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. 5.8 Medium
- mariadb, mariadb foundation server, amazon aurora mysql +3 more +5 more MariaDB Server Audit Plugin Comment Handling Bypass 5.3 Medium
- step-security harden-runner Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier) 6.3 Medium
- dell powerscale onefs Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability.... 4.3 Medium
- nextcloud server, kiteworks security-advisories +1 more Nextcloud Server admin_audit does not log all actions on files in groupfolders 4.3 Medium
- wikimedia foundation mediawiki - abusefilter extension Lack of Audit Logging in AbuseFilter 5.3 Medium
- open-emr openemr OpenEMR doesn't log password administration properly 5.4 Medium
- devolutions remote desktop manager Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows... 5.4 Medium
- opentext secure content manager Client-side audit exclusion vulnerability 5.1 Medium
- baxter life2000 ventilation system, life2000 ventilator firmware +1 more Life2000 ventilator and Service PC lack sufficient audit logging capabilities 10.0 Critical
- progress moveit transfer MOVEit Transfer Logging Bypass Vulnerability 4.3 Medium
- dell powerscale onefs Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A... 3.0 Low
- opayweb opay An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be... 7.5 High
- hitachi hirdb server, hirdb server with addtional function, hirdb structured data access facility +1 more +3 more Insufficient Logging Vulnerability in HiRDB 5.3 Medium
- fortinet fortideceptor, fortisandbox +1 more An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to... 3.6 Low
- nextcloud server, kiteworks security-advisories +1 more Federated share accepting/declining is not logged in audit log in Nextcloud Server 2.1 Low
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Hacking attempts from logged-in users are not properly logged by GM 4.3 Medium
- sap netweaver application server java, sap se netweaver as java (administrator applications) +1 more When user with insufficient privileges tries to access any application in SAP NetWeaver... 3.5 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 more Audit log is not properly logging unsetting of share expiration date 3.3 Low
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 more A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR... 4.3 Medium
- siemens siport mp A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of... 6.5 Medium
- magento, adobe systems incorporated magento 1& 2 +1 more Magento 2 Community Edition Insufficient Logging 5.3 Medium
- elastic winlogbeat, logstash +1 more Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to... 7.5 High