Xorux develops a focused line of systems-management and monitoring tools for enterprise infrastructure, with particular emphasis on monitoring storage systems and logical partitions in large IT environments. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur across products such as LPAR2RRD, Stor2RRD, and XorMon through weakness classes including OS command injection, improper use of privileged APIs, and cleartext storage of sensitive credentials—patterns endemic to administrative software that operates with elevated permissions across diverse backend systems. Defenders should treat updates for these tools as high-priority given their critical-severity tendency and their placement in infrastructure-management tiers; live exploitation activity and severity details are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Xorux over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-54769HIGH An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrit | Jul 29, 2025 | 8.8 | 41 | NO | YES |
CVE-2020-24032CRITICAL tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. | Aug 18, 2020 | 9.8 | 33 | NO | NO |
CVE-2014-4982CRITICAL LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server. | Jan 10, 2020 | 9.8 | 32 | NO | NO |
CVE-2021-42371CRITICAL lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30. | Nov 8, 2021 | 9.8 | 31 | NO | NO |
CVE-2014-4981CRITICAL LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters. | Feb 17, 2020 | 9.8 | 31 | NO | NO |
CVE-2021-42372HIGH A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as th | Nov 8, 2021 | 8.8 | 30 | NO | NO |
CVE-2021-42370HIGH A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties | Nov 8, 2021 | 7.5 | 24 | NO | NO |
CVE-2025-54766MEDIUM An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to | Jul 29, 2025 | 5.3 | 23 | NO | NO |
CVE-2025-54765MEDIUM An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to | Jul 29, 2025 | 5.3 | 23 | NO | NO |
CVE-2025-54767MEDIUM An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user. | Jul 29, 2025 | 6.5 | 22 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Xorux.
Media articles that mention a CVE ID that affects a product developed by Xorux — matched by CVE ID, not by vendor name.