Skip to contentSolarwinds Orion Platform vulnerabilities
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-36964EPSS 17.8%8.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Command InjectionCVE-2022-369627.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Improper Input ValidationCVE-2022-369608.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-38108Public exploitEPSS 66.6%7.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-36958EPSS 81.9%8.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-36957EPSS 15.0%7.2 High
- solarwinds orion platform, platform +1 moreStored and DOM XSS in QoE Applications: Orion PlatformCVE-2022-369656.1 Medium
- solarwinds orion platformOrion Platform SQL Injection Privilege Escalation VulnerabilityCVE-2022-36961EPSS 74.3%8.8 High
- solarwinds orion platformUnrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6CVE-2021-352446.8 Medium
- solarwinds orion platform, patch manager +1 moreInsecure Deserialization of untrusted data causing Remote code execution vulnerability.CVE-2021-35217EPSS 72.8%8.9 High
- solarwinds orion platformActionPluginBaseView Deserialization of Untrusted Data RCECVE-2021-35215Public exploitEPSS 69.9%8.9 High
- solarwinds orion platformStored XSS through URL POST parameter in CreateExternalWebsite VulnerabilityCVE-2021-352384.8 Medium
- solarwinds orion platformBlind SQL injection VulnerabilityCVE-2021-352128.9 High
- solarwinds orion platformOrion User setting Improper Access Control Privilege Escalation VulnerabilityCVE-2021-352138.9 High
- solarwinds orion platformStored XSS via Help Server settingsCVE-2021-352406.5 Medium
- solarwinds orion platformStored XSS in Maps text box hyperlink VulnerabilityCVE-2021-352397.5 High
- solarwinds orion platformResource.aspx Reflected Cross-Site Scripting VulnerabilityCVE-2021-352228.0 High
- solarwinds orion platformImportAlert Improper Access Control Tampering VulnerabilityCVE-2021-352216.3 Medium
- solarwinds orion platformEmailWebPage Command Injection RCECVE-2021-352208.1 High
- solarwinds orion platformExportToPdfCmd Arbitrary File Read Information Disclosure VulnerabilityCVE-2021-352196.0 Medium
- solarwinds orion platformThis vulnerability allows remote attackers to execute escalate privileges on affected...CVE-2021-272589.8 Critical
- solarwinds orion platformThis vulnerability allows remote attackers to create arbitrary files on affected installations of...CVE-2020-27871EPSS 90.8%7.2 High
- solarwinds orion platformThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2020-278707.5 High
- solarwinds orion, orion platform +1 moreSolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commandsCVE-2020-10148In KEVPublic exploitEPSS 92.0%9.8 Critical