Skip to contentSolarwinds vulnerabilities
Newest
- solarwinds help deskCross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to...CVE-2019-169585.4 Medium
- solarwinds n-centralSolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly....CVE-2020-159104.7 Medium
- solarwinds n-centralSolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or...CVE-2020-159098.8 High
- solarwinds orion platformStored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1...CVE-2020-131699.0 Critical
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers...CVE-2020-155736.1 Medium
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case...CVE-2020-155747.5 High
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case...CVE-2020-155756.1 Medium
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.CVE-2020-155767.5 High
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.CVE-2020-155419.8 Critical
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.CVE-2020-155439.8 Critical
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.CVE-2020-155429.8 Critical
- solarwinds orion network performance monitor, orion web performance monitor +1 moreSolarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows...CVE-2020-14005EPSS 14.3%8.8 High
- solarwinds orion network performance monitor, orion web performance monitor +1 moreSolarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows...CVE-2020-140065.4 Medium
- solarwinds orion network performance monitor, orion web performance monitor +1 moreSolarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows...CVE-2020-140075.4 Medium
- solarwinds advanced monitoring agentSolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a...CVE-2020-139127.3 High
- solarwinds managed service provider patch management engineAn issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1...CVE-2020-12608Public exploitEPSS 22.4%7.8 High
- solarwinds netpath, orion platform, network performance monitor +2 moreSolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information...CVE-2019-128645.5 Medium
- solarwinds webhelpdeskFormula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value ...CVE-2019-200027.8 High
- solarwinds damewareClassic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause...CVE-2020-5734EPSS 25.1%7.5 High
- solarwinds serv-u managed file transferSolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to...CVE-2019-127698.8 High
- solarwinds netpath, orion platform, network performance monitor +2 moreSolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by...CVE-2019-128634.8 Medium
- solarwinds network performance monitor orion platform 2018 netpath, network performance monitor orion platform 2018 npm +1 moreSolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS...CVE-2019-129545.4 Medium
- solarwinds n-centralSolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to...CVE-2020-79847.5 High
- solarwinds orion platformA Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds...CVE-2019-171276.1 Medium
- solarwinds orion platformA Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds...CVE-2019-171256.1 Medium
- solarwinds serv-u ftp serverA cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the...CVE-2019-198295.4 Medium
- solarwinds serv-u ftp serverA stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP...CVE-2019-131825.4 Medium
- solarwinds serv-u ftp serverA CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.CVE-2019-131816.5 Medium
- solarwinds dameware mini remote controlThe Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication...CVE-2019-3980Public exploit9.8 Critical
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its...CVE-2018-193866.1 Medium
- solarwinds network performance monitorSolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api...CVE-2018-134428.8 High
- solarwinds serv-u ftp server, serv-u mft server +1 moreA privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.CVE-2019-12181Public exploitEPSS 65.4%8.8 High
- solarwinds dameware mini remote controlDameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote...CVE-2019-3957EPSS 25.6%7.4 High
- solarwinds serv-u ftp serverThe local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access...CVE-2018-199997.8 High
- solarwinds dameware mini remote controlDWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with...CVE-2019-9017Public exploitEPSS 19.2%7.5 High
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code...CVE-2018-159067.2 High
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web...CVE-2018-199344.8 Medium
- solarwinds orion platformSolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ...CVE-2019-95469.8 Critical
- solarwinds orion network performance monitorSolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the...CVE-2019-8917EPSS 36.4%9.8 Critical
- solarwinds sftp\/scp serverSolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and...CVE-2018-167929.1 Critical
- solarwinds sftp\/scp serverIn SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and...CVE-2018-167919.8 Critical
- solarwinds dameware mini remote controlSolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.CVE-2018-12897Public exploit7.8 High
- solarwinds serv-uA denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated...CVE-2018-102416.5 Medium
- solarwinds serv-uSolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token...CVE-2018-102407.3 High
- solarwinds backup profiler, storage manager, storage profiler +2 moreSQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2,...CVE-2012-2576Public exploitEPSS 60.0%9.8 Critical
- solarwinds network performance monitorThe 'Upload logo from external path' function of SolarWinds Network Performance Monitor version...CVE-2017-95384.9 Medium
- solarwinds network performance monitorPersistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance...CVE-2017-95374.8 Medium
- solarwinds log \& event managerIn SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when...CVE-2017-7722Public exploitEPSS 12.7%10.0 Critical
- solarwinds log \& event managerSolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to...CVE-2017-76478.8 High
- solarwinds log \& event managerSolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse...CVE-2017-76466.5 Medium
- Show moreLoading…