Skip to content

Solarwinds Orion vulnerabilities

solarwinds netpath, orion platform, network performance monitor +2 moreSolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information...CVE-2019-128645.5 MediumMay 4, 2020
solarwinds netpath, orion platform, network performance monitor +2 moreSolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by...CVE-2019-128634.8 MediumFebruary 25, 2020
solarwinds network performance monitor orion platform 2018 netpath, network performance monitor orion platform 2018 npm +1 moreSolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS...CVE-2019-129545.4 MediumFebruary 17, 2020
solarwinds orion platformA Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds...CVE-2019-171276.1 MediumJanuary 17, 2020
solarwinds orion platformA Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds...CVE-2019-171256.1 MediumJanuary 17, 2020
solarwinds orion platformSolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ...CVE-2019-95469.8 CriticalMarch 1, 2019
solarwinds orion network performance monitorSolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the...CVE-2019-8917EPSS 36.4%9.8 CriticalFebruary 18, 2019
solarwinds orion ip address manager, orion netflow traffic analyzer, orion network configuration manager +5 more +7 moreMultiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx...CVE-2014-9566Public exploitEPSS 46.7%7.5 HighMarch 10, 2015
solarwinds orion network performance monitor, ip address manager web interface +1 moreCross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before...CVE-2012-4939Public exploit4.3 MediumOctober 31, 2012
solarwinds orion network performance monitorMultiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network...CVE-2012-2602Public exploit6.8 MediumAugust 12, 2012
solarwinds orion network performance monitorMultiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance...CVE-2012-2577Public exploitEPSS 10.2%4.3 MediumAugust 12, 2012
solarwinds orion network performance monitorMultiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance...CVE-2010-48284.3 MediumAugust 24, 2011