Vulnerability Database

Published: Jun 1, 2018
Updated: Nov 9, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-11650" target="_blank" rel="noopener"> CVE-2018-11650
GHSA: <a href="https://github.com/advisories/GHSA-h7g4-65mf-6mxh" target="_blank" rel="noopener"> GHSA-h7g4-65mf-6mxh
Severity: Low
Exploit:

309,136

Total vulnerabilities in the database

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.

CVSS v2:

CWEs:

OWASP TOP 10:

Software	From	Fixed in
graylog / graylog	-	2.4.4
org.graylog2 / graylog2-server	-	2.4.4

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.