Skip to contentSolarwinds vulnerabilities
Newest
- solarwinds web help deskSolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilityCVE-2024-28988EPSS 41.7%9.8 Critical
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer Hard-coded Cryptographic Key VulnerabilityCVE-2025-263985.6 Medium
- solarwinds web help deskSolarWinds Web Help Desk XML External Entity Injection (XXE) VulnerabilityCVE-2025-264005.3 Medium
- solarwinds observability self-hostedSolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation VulnerabilityCVE-2025-263977.8 High
- solarwinds observability self-hostedSolarWinds SWOSH DOM-based reflective XSS VulnerabilityCVE-2025-263957.1 High
- solarwinds observability self-hostedSolarWinds SWOSH Open Redirection VulnerabilityCVE-2025-263944.8 Medium
- solarwinds dameware mini remote control serviceSolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation VulnerabilityCVE-2025-263967.8 High
- solarwinds serv-uSolarWinds Serv-U Client-Side Cross-Site Scripting VulnerabilityCVE-2024-45712Public exploit2.6 Low
- solarwinds service deskSolarWinds Service Desk Broken Access Control VulnerabilityCVE-2025-263935.4 Medium
- solarwinds platformSolarWinds Platform Information Disclosure VulnerabilityCVE-2024-526113.5 Low
- solarwinds platformSolarWinds Platform Reflected Cross-Site Scripting VulnerabilityCVE-2024-526126.8 Medium
- solarwinds kiwi syslog ngSensitive data disclosure vulnerabilityCVE-2024-457184.6 Medium
- solarwinds, solarwinds platform +1 moreSolarWinds Platform Server-Side Request Forgery VulnerabilityCVE-2024-526063.5 Low
- solarwinds web help deskSolarWinds Web Help Desk Cryptographic Key Management VulnerabilityCVE-2024-289895.5 Medium
- solarwinds web help deskSolarWinds Web Help Desk Local File Read VulnerabilityCVE-2024-457095.3 Medium
- solarwinds platformSolarWinds Platform Cross- Site Scripting VulnerabilityCVE-2024-457177.0 High
- solarwinds kiwi cattoolsSolarWinds Kiwi CatTools Sensitive Information Disclosure VulnerabilityCVE-2024-457135.1 Medium
- solarwinds serv-uSolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution VulnerabilityCVE-2024-457117.5 High
- solarwinds serv-uSolarWinds Serv-U Stored XSS VulnerabilityCVE-2024-457144.8 Medium
- solarwinds platformSolarWinds Platform Edit Function Cross-Site Scripting VulnerabilityCVE-2024-457157.1 High
- solarwinds platformSolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2024-457107.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code ExecutionCVE-2024-289919.0 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass VulnerabilityCVE-2024-289906.3 Medium
- solarwinds web help desk, webhelpdesk +1 moreSolarWinds Web Help Desk Hardcoded Credential VulnerabilityCVE-2024-28987In KEVPublic exploitEPSS 93.3%9.1 Critical
- solarwinds web help desk, webhelpdesk +1 moreSolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilityCVE-2024-28986In KEVEPSS 84.6%9.8 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution VulnerabilityCVE-2024-234719.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution VulnerabilityCVE-2024-234709.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution VulnerabilityCVE-2024-28074EPSS 10.9%9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilityCVE-2024-234679.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilityCVE-2024-234669.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass VulnerabilityCVE-2024-234658.3 High
- solarwinds access rights managerSolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution VulnerabilityCVE-2024-23469EPSS 17.9%9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityCVE-2024-234759.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityCVE-2024-23472EPSS 18.6%9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityCVE-2024-289937.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityCVE-2024-289927.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityCVE-2024-234687.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityCVE-2024-234747.6 High
- solarwinds serv-uSolarWinds Serv-U L Directory Transversal VulnerabilityCVE-2024-28995In KEVPublic exploitEPSS 99.6%8.6 High
- solarwinds platformSolarWinds Platform Stored XSS VulnerabilityCVE-2024-290047.1 High
- solarwinds platformSolarWinds Platform Race Condition VulnerabilityCVE-2024-28999Public exploitEPSS 13.9%6.4 Medium
- solarwinds platformSolarWinds Platform SWQL Injection VulnerabilityCVE-2024-289967.5 High
- solarwinds platformSolarWinds Platform Reflected XSS VulnerabilityCVE-2024-290007.9 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass VulnerabilityCVE-2024-234738.6 High
- solarwinds access rights managerSolarWinds ARM Deserialization of Untrusted Data Remote Code ExecutionCVE-2024-28075EPSS 78.0%9.0 Critical
- solarwinds serv-uArbitrary File Overwrite VulnerabilityCVE-2024-280725.7 Medium
- solarwinds platformSolarWinds Platform Cross Site Scripting VulnerabilityCVE-2024-290037.5 High
- solarwinds platformSolarWinds Platform SWQL Injection VulnerabilityCVE-2024-290017.5 High
- solarwinds platformSolarWinds Platform Arbitrary Open Redirection VulnerabilityCVE-2024-280767.0 High
- solarwinds serv-u, servu +1 moreSolarWinds Serv-U Directory Traversal Remote Code Execution VulnerabilityCVE-2024-280738.4 High
- Show moreLoading…