Skip to content
OpenAdvisories

Product · Xorux

LPAR2RRD

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-54768

    KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information

    An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

    Xorux LPAR2RRD
  • Medium 6.5
    CVE-2025-54767

    KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service

    An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user.

    Xorux LPAR2RRD