Skip to contentSolarwinds vulnerabilities
Newest
- solarwinds orion platformStored XSS through URL POST parameter in CreateExternalWebsite VulnerabilityCVE-2021-352384.8 Medium
- solarwinds orion platformBlind SQL injection VulnerabilityCVE-2021-352128.9 High
- solarwinds serv-uExecute Command Function Allows Remote Code Execution (RCE)VulnerabilityCVE-2021-352238.5 High
- solarwinds orion platformOrion User setting Improper Access Control Privilege Escalation VulnerabilityCVE-2021-352138.9 High
- solarwinds orion platformStored XSS via Help Server settingsCVE-2021-352406.5 Medium
- solarwinds orion platformStored XSS in Maps text box hyperlink VulnerabilityCVE-2021-352397.5 High
- solarwinds orion platformResource.aspx Reflected Cross-Site Scripting VulnerabilityCVE-2021-352228.0 High
- solarwinds orion platformImportAlert Improper Access Control Tampering VulnerabilityCVE-2021-352216.3 Medium
- solarwinds orion platformEmailWebPage Command Injection RCECVE-2021-352208.1 High
- solarwinds orion platformExportToPdfCmd Arbitrary File Read Information Disclosure VulnerabilityCVE-2021-352196.0 Medium
- solarwinds web help deskAccess Restriction bypass vulnerability via referrer spoof - Business Logic BypassCVE-2021-320765.3 Medium
- solarwinds orion platformThe node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to...CVE-2021-286745.4 Medium
- solarwinds serv-u, serv-u managed file transfer server and serv-u secured ftp +1 moreServ-U Remote Memory Escape VulnerabilityCVE-2021-35211In KEVPublic exploitEPSS 91.2%9.0 Critical
- solarwinds dameware mini remote controlIn SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow...CVE-2021-312179.1 Critical
- solarwinds orion job schedulerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2021-314758.8 High
- solarwinds network performance monitorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2021-31474EPSS 93.9%9.8 Critical
- solarwinds serv-uSolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter.CVE-2021-326045.4 Medium
- solarwinds serv-u ftp server, serv-u mft server +1 moreSolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a...CVE-2020-224284.8 Medium
- solarwinds serv-u file serverSolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.CVE-2021-251796.1 Medium
- solarwinds serv-uAn issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can...CVE-2021-31547.5 High
- solarwinds orion virtual infrastructure monitor, orion platform +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2021-272777.8 High
- solarwinds orion platformThis vulnerability allows remote attackers to execute escalate privileges on affected...CVE-2021-272589.8 Critical
- solarwinds patch managerThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2021-272407.8 High
- solarwinds orion platformSolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the...CVE-2020-358564.8 Medium
- solarwinds orion platformThe custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse...CVE-2021-31094.8 Medium
- solarwinds network performance monitorThis vulnerability allows remote attackers to escalate privileges on affected installations of...CVE-2020-278698.8 High
- solarwinds orion platformThis vulnerability allows remote attackers to create arbitrary files on affected installations of...CVE-2020-27871EPSS 90.8%7.2 High
- solarwinds orion platformThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2020-278707.5 High
- solarwinds serv-uIn SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files ...CVE-2021-252767.1 High
- solarwinds orion platformThe Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message...CVE-2021-25274EPSS 36.4%9.8 Critical
- solarwinds orion platformSolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and...CVE-2021-252757.8 High
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.CVE-2020-280015.4 Medium
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.CVE-2020-279946.5 Medium
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.CVE-2020-354825.4 Medium
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.CVE-2020-354819.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.CVE-2019-169615.4 Medium
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.CVE-2019-169545.4 Medium
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name...CVE-2019-169605.4 Medium
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.CVE-2019-169565.4 Medium
- solarwinds orion, orion platform +1 moreSolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commandsCVE-2020-10148In KEVPublic exploitEPSS 92.0%9.8 Critical
- solarwinds webhelpdeskSolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file...CVE-2019-169596.5 Medium
- solarwinds webhelpdeskSolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.CVE-2019-169555.4 Medium
- solarwinds webhelpdeskSolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.CVE-2019-169575.4 Medium
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint...CVE-2020-256228.8 High
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require...CVE-2020-256218.4 High
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by...CVE-2020-256207.8 High
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict...CVE-2020-256194.4 Medium
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect...CVE-2020-256188.8 High
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint...CVE-2020-256178.8 High
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS...CVE-2018-162435.4 Medium
- Show moreLoading…