---
id: "CVE-2024-9537"
kind: "vulnerability"
aliases: ["CVE-2024-9537"]
title: "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "sciencelogic sl1", "fixed": ["12.1.3"], "affected": ">= 10.1.0, < 12.1.3", "ecosystem": "vendor"}, {"name": "sciencelogic sl1", "fixed": ["12.2.3"], "affected": ">= 12.2.0, < 12.2.3", "ecosystem": "vendor"}, {"name": "ScienceLogic SL1", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "monitoring", "sciencelogic-sl1", "vendor"]
not_affected_if: ["unknown"]
published_at: "2024-10-18T15:15:04+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-24T00:09:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9537", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party…

ScienceLogic SL1, a hosted or self-managed IT monitoring platform, has an unspecified flaw in a third-party component. CISA reports attackers are exploiting it in the wild, but the sources do not say what an attacker gains.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:sciencelogic sl1 affected >= 10.1.0, < 12.1.3 fixed 12.1.3
- vendor:sciencelogic sl1 affected >= 12.2.0, < 12.2.3 fixed 12.2.3
- vendor:ScienceLogic SL1 affected ? fixed ?

## Fix

Apply the mitigations from the vendor's instructions, or stop using the product if no mitigation exists (per CISA's required action). Affected and fixed versions: unknown.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-9537

## From the sources

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+.  Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_