Ni Flexlogger
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Ni Flexlogger.
By the Year
In 2026 there have been 0 vulnerabilities in Ni Flexlogger. Last year, in 2025 Flexlogger had 1 security vulnerability published. Right now, Flexlogger is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 1 | 8.80 |
| 2024 | 2 | 6.65 |
| 2023 | 1 | 5.50 |
| 2022 | 1 | 6.10 |
It may take a day or so for new Flexlogger vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Ni Flexlogger Security Vulnerabilities
NI FlexLogger usiReg URI Fil Parsing DIR-Trav RCE
CVE-2025-2449
8.8 - High
- March 18, 2025
NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of NI FlexLogger. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of URI files by the usiReg component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-21805.
Directory traversal
NI SystemLink Server KeyValueDatabase Directory Permission Flaw (CVE-2024-6122)
CVE-2024-6122
5.5 - Medium
- July 22, 2024
An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
Incorrect Default Permissions
NI SystemLink Server Outdated Redis Enables Multiple Exploits (CVE-2024-6121)
CVE-2024-6121
7.8 - High
- July 22, 2024
An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
TopoGrafix DataPlugin GPX Permission Bypass Disclosure
CVE-2023-5136
5.5 - Medium
- November 08, 2023
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.
Incorrect Permission Assignment for Critical Resource
There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products
CVE-2022-27237
6.1 - Medium
- April 21, 2022
There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Ni Flexlogger or by Ni? Click the Watch button to subscribe.
