Total 334 security vulnerabilities recorded for solarwinds software and firmware.
SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection....
SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS....
SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal....
SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name....
SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket....
SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field....
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket....
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability coul...
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket....
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account....
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request....
An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF....
An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to a...
An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] a...
An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An at...
An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is ...
An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user ...
SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralMa...
Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name....
SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with ...
SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Central JSESSIONID cookie attribu...
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may l...
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response....
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194....