Skip to contentSolarwinds vulnerabilities
Newest
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data VulnerabilityCVE-2022-47503EPSS 41.0%7.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data VulnerabilityCVE-2022-38111EPSS 84.8%7.2 High
- solarwinds dynamipsUse of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.CVE-2022-470127.5 High
- solarwinds database performance analyzer (dpa), database performance analyzer +1 moreSensitive Information Disclosure VulnerabilityCVE-2022-381127.5 High
- solarwinds database performance analyzer (dpa), database performance analyzer +1 moreReflected Cross-Site Scripting VulnerabilityCVE-2022-381105.4 Medium
- solarwinds hybrid cloud observability (hco)/ solarwinds platform, platform +1 moreSensitive Data Disclosure VulnerabilityCVE-2022-475125.5 Medium
- solarwinds serv-u, serv-u file server +1 moreCross-Site Scripting Vulnerability in Serv-U Web ClientCVE-2022-381065.4 Medium
- solarwinds serv-u, serv-u ftp server +1 moreCommon Key Vulnerability in Serv-U FTP ServerCVE-2021-352527.5 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-36964EPSS 17.8%8.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Command InjectionCVE-2022-369627.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Improper Input ValidationCVE-2022-369608.8 High
- solarwinds engineer's toolset, engineer\'s toolset +1 moreUnprotected Transport of Credentials (HSTS) VulnerabilityCVE-2021-352465.3 Medium
- solarwinds security event manager, sem +1 moreInsecure Methods VulnerabilityCVE-2022-381155.3 Medium
- solarwinds security event manager, sem +1 moreClient-Side Desync VulnerabilityCVE-2022-381146.1 Medium
- solarwinds security event manager, sem +1 moreInformation Disclosure VulnerabilityCVE-2022-381135.3 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-38108Public exploitEPSS 66.6%7.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-36958EPSS 81.9%8.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted DataCVE-2022-36957EPSS 15.0%7.2 High
- solarwinds orion platform, platform +1 moreInsecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6CVE-2022-369665.4 Medium
- solarwinds sql sentrySensitive Data Disclosure VulnerabilityCVE-2022-381075.3 Medium
- solarwinds network configuration managerHashed Credential Exposure VulnerabilityCVE-2021-352266.5 Medium
- solarwinds orion platform, platform +1 moreStored and DOM XSS in QoE Applications: Orion PlatformCVE-2022-369656.1 Medium
- solarwinds orion platformOrion Platform SQL Injection Privilege Escalation VulnerabilityCVE-2022-36961EPSS 74.3%8.8 High
- solarwinds serv-uDomain Admin Broken Access ControlCVE-2021-352494.3 Medium
- solarwinds serv-uDirectory Transversal Vulnerability in Serv-U 15.3CVE-2021-35250Public exploitEPSS 12.8%7.5 High
- solarwinds database performance monitor, database performance analyzer +1 moreCross-Site Scripting Vulnerability using SQL QueryCVE-2021-352296.8 Medium
- solarwinds webhelpdeskAuthenticated Remote Code Execution in WebHelpDesk 12.7.8CVE-2021-352548.2 High
- solarwinds web help deskSensitive Data Disclosure VulnerabilityCVE-2021-352515.3 Medium
- solarwinds serv-uImproper Input Validation Vulnerability in Serv-UCVE-2021-35247In KEV4.3 Medium
- solarwinds web help desk, webhelpdesk +1 moreHard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate QueriesCVE-2021-352326.8 Medium
- solarwinds web help deskHTTP PUT & DELETE Methods EnabledCVE-2021-352435.3 Medium
- solarwinds orion core, orion platform +1 moreExposed Dangerous Functions - Privileged EscalationCVE-2021-352348.0 High
- solarwinds orion, orion platform +1 moreUnrestricted access to Orion.UserSettings SWIS entity for low-privilege usersCVE-2021-352486.8 Medium
- solarwinds orion platformUnrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6CVE-2021-352446.8 Medium
- solarwinds serv-u, serv-u server +1 moreA valid CSRF token is present in response to an invalid requestCVE-2021-352428.3 High
- solarwinds serv-u, serv-u ftp +1 moreBroken Access Control Vulnerability for SolarWinds Serv-UCVE-2021-352458.4 High
- solarwinds kiwi syslog serverClickjacking VulnerabilityCVE-2021-352375.0 Medium
- solarwinds kiwi syslog serverMissing Secure Flag From SSL CookieCVE-2021-352363.1 Low
- solarwinds kiwi syslog serverASP.NET Debug Feature EnabledCVE-2021-352355.3 Medium
- solarwinds kiwi syslog serverHTTP TRACK & TRACE Methods EnabledCVE-2021-352335.3 Medium
- solarwinds kiwi syslog serverUnquoted Path (SMB Login) VulnerabilityCVE-2021-352316.7 Medium
- solarwinds kiwi cattoolsUnquoted Path Vulnerability (SMB Login) in Kiwi CatToolsCVE-2021-352306.7 Medium
- solarwinds, solarwinds database performance analyzer +1 moreReflected cross site scripting affecting SolarWinds: DPA 2021.3.7388CVE-2021-352285.5 Medium
- solarwinds access rights managerInsecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARMCVE-2021-352274.7 Medium
- npm, solarwinds network performance monitor +1 moreNetpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5CVE-2021-352255.0 Medium
- solarwinds pingdomSession Management VulnerabilityCVE-2021-352144.8 Medium
- solarwinds orion platform, patch manager +1 moreInsecure Deserialization of untrusted data causing Remote code execution vulnerability.CVE-2021-35217EPSS 72.8%8.9 High
- solarwinds patch manager, orion platform +1 moreChart Endpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVE-2021-35218EPSS 76.4%8.9 High
- solarwinds patch managerDeserialization of Untrusted Data in Resource Controls Remote Code ExecutionCVE-2021-35216EPSS 81.4%8.9 High
- solarwinds orion platformActionPluginBaseView Deserialization of Untrusted Data RCECVE-2021-35215Public exploitEPSS 69.9%8.9 High
- Show moreLoading…