Solarwinds Orion Platform vulnerabilities

• solarwinds platform, orion platform +1 more SolarWinds Platform Exposed Dangerous Method Vulnerability CVE-2023-23845 6.8 MediumSeptember 13, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Exposed Dangerous Method Vulnerability CVE-2023-23840 6.8 MediumSeptember 13, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Incorrect Input Neutralization Vulnerability CVE-2022-47509 6.1 MediumApril 21, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Local Privilege Escalation Vulnerability CVE-2022-47505 7.8 HighApril 21, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVE-2022-36963 7.2 HighApril 21, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVE-2023-23836 EPSS 80.3% 7.2 HighFebruary 15, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVE-2022-47507 EPSS 12.9% 7.2 HighFebruary 15, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Directory Traversal Vulnerability CVE-2022-47506 7.8 HighFebruary 15, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVE-2022-47504 EPSS 41.9% 7.2 HighFebruary 15, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVE-2022-47503 EPSS 41.0% 7.2 HighFebruary 15, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVE-2022-38111 EPSS 84.8% 7.2 HighFebruary 15, 2023
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data CVE-2022-36964 EPSS 17.8% 8.8 HighNovember 29, 2022
• solarwinds platform, orion platform +1 more SolarWinds Platform Command Injection CVE-2022-36962 7.2 HighNovember 29, 2022
• solarwinds platform, orion platform +1 more SolarWinds Platform Improper Input Validation CVE-2022-36960 8.8 HighNovember 29, 2022
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data CVE-2022-38108 Public exploit EPSS 66.6% 7.2 HighOctober 20, 2022
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data CVE-2022-36958 EPSS 81.9% 8.8 HighOctober 20, 2022
• solarwinds platform, orion platform +1 more SolarWinds Platform Deserialization of Untrusted Data CVE-2022-36957 EPSS 15.0% 7.2 HighOctober 20, 2022
• solarwinds orion platform, platform +1 more Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6 CVE-2022-36966 5.4 MediumOctober 20, 2022
• solarwinds orion platform Orion Platform SQL Injection Privilege Escalation Vulnerability CVE-2022-36961 EPSS 74.3% 8.8 HighSeptember 30, 2022
• solarwinds orion core, orion platform +1 more Exposed Dangerous Functions - Privileged Escalation CVE-2021-35234 8.0 HighDecember 20, 2021
• solarwinds orion, orion platform +1 more Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users CVE-2021-35248 6.8 MediumDecember 20, 2021
• solarwinds orion platform Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6 CVE-2021-35244 6.8 MediumDecember 20, 2021
• solarwinds patch manager, orion platform +1 more Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2021-35218 EPSS 76.4% 8.9 HighSeptember 1, 2021
• solarwinds orion platform ActionPluginBaseView Deserialization of Untrusted Data RCE CVE-2021-35215 Public exploit EPSS 69.9% 8.9 HighSeptember 1, 2021
• solarwinds orion platform Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability CVE-2021-35238 4.8 MediumSeptember 1, 2021
• solarwinds orion platform Blind SQL injection Vulnerability CVE-2021-35212 8.9 HighAugust 31, 2021
• solarwinds orion platform Orion User setting Improper Access Control Privilege Escalation Vulnerability CVE-2021-35213 8.9 HighAugust 31, 2021
• solarwinds orion platform Stored XSS via Help Server settings CVE-2021-35240 6.5 MediumAugust 31, 2021
• solarwinds orion platform Stored XSS in Maps text box hyperlink Vulnerability CVE-2021-35239 7.5 HighAugust 31, 2021
• solarwinds orion platform Resource.aspx Reflected Cross-Site Scripting Vulnerability CVE-2021-35222 8.0 HighAugust 31, 2021
• solarwinds orion platform ImportAlert Improper Access Control Tampering Vulnerability CVE-2021-35221 6.3 MediumAugust 31, 2021
• solarwinds orion platform EmailWebPage Command Injection RCE CVE-2021-35220 8.1 HighAugust 31, 2021
• solarwinds orion platform ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability CVE-2021-35219 6.0 MediumAugust 31, 2021
• solarwinds orion platform The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to... CVE-2021-28674 5.4 MediumJuly 27, 2021
• solarwinds orion virtual infrastructure monitor, orion platform +1 more This vulnerability allows local attackers to escalate privileges on affected installations of... CVE-2021-27277 7.8 HighApril 22, 2021
• solarwinds orion platform This vulnerability allows remote attackers to execute escalate privileges on affected... CVE-2021-27258 9.8 CriticalApril 14, 2021
• solarwinds orion platform SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the... CVE-2020-35856 4.8 MediumMarch 26, 2021
• solarwinds orion platform The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse... CVE-2021-3109 4.8 MediumMarch 26, 2021
• solarwinds orion platform This vulnerability allows remote attackers to create arbitrary files on affected installations of... CVE-2020-27871 EPSS 90.8% 7.2 HighFebruary 10, 2021
• solarwinds orion platform This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2020-27870 7.5 HighFebruary 10, 2021
• solarwinds orion platform The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message... CVE-2021-25274 EPSS 36.4% 9.8 CriticalFebruary 3, 2021
• solarwinds orion platform SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and... CVE-2021-25275 7.8 HighFebruary 3, 2021
• solarwinds orion, orion platform +1 more SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands CVE-2020-10148 In KEVPublic exploit EPSS 92.0% 9.8 CriticalDecember 29, 2020
• solarwinds orion platform Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1... CVE-2020-13169 9.0 CriticalSeptember 17, 2020
• solarwinds netpath, orion platform, network performance monitor +2 more SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information... CVE-2019-12864 5.5 MediumMay 4, 2020
• solarwinds netpath, orion platform, network performance monitor +2 more SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by... CVE-2019-12863 4.8 MediumFebruary 25, 2020
• solarwinds network performance monitor orion platform 2018 netpath, network performance monitor orion platform 2018 npm +1 more SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS... CVE-2019-12954 5.4 MediumFebruary 17, 2020
• solarwinds orion platform A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds... CVE-2019-17127 6.1 MediumJanuary 17, 2020
• solarwinds orion platform A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds... CVE-2019-17125 6.1 MediumJanuary 17, 2020
• solarwinds orion platform SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ... CVE-2019-9546 9.8 CriticalMarch 1, 2019