solarwinds Vulnerability Advisory Catalog

Total 334 security vulnerabilities recorded for solarwinds software and firmware.

← Back to All Vendors
CVE-2025-40554 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke s...

📅 2026-01-28
CVSS 9.8 Dossier →
CVE-2025-40553 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, whic...

📅 2026-01-28
CVSS 9.8 Dossier →
CVE-2025-40552 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to exe...

📅 2026-01-28
CVSS 9.8 Dossier →
CVE-2025-40551 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, whic...

📅 2026-01-28
CVSS 9.8 Dossier →
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to ad...

📅 2026-01-28
CVSS 7.5 Dossier →
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated atta...

📅 2026-01-28
CVSS 8.1 Dossier →
CVE-2025-40549 CRITICAL
Component: serv-u

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to...

📅 2025-11-18
CVSS 9.1 Dossier →
CVE-2025-40548 CRITICAL
Component: serv-u

A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code. ...

📅 2025-11-18
CVSS 9.1 Dossier →
CVE-2025-40547 CRITICAL
Component: serv-u

A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute cod...

📅 2025-11-18
CVSS 9.1 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could man...

📅 2025-11-18
CVSS 4.8 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL f...

📅 2025-11-18
CVSS 5.4 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vul...

📅 2025-10-21
CVSS 5.4 Dossier →
CVE-2025-26399 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if expl...

📅 2025-09-23
CVSS 9.8 Dossier →
CVE-2024-28988 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an ...

📅 2025-09-01
CVSS 9.8 Dossier →
Component: database_performance_analyzer

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine...

📅 2025-08-12
CVSS 5.6 Dossier →
Component: web_help_desk

SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure...

📅 2025-07-29
CVSS 5.3 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with lo...

📅 2025-07-24
CVSS 7.8 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attac...

📅 2025-06-10
CVSS 7.1 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could m...

📅 2025-06-10
CVSS 4.8 Dossier →
Component: serv-u

SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated...

📅 2025-04-15
CVSS 2.6 Dossier →
Component: solarwinds_platform

SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters...

📅 2025-02-11
CVSS 6.8 Dossier →
Component: solarwinds_platform

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything se...

📅 2025-02-11
CVSS 3.5 Dossier →
Component: solarwinds_platform

SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of ...

📅 2025-02-11
CVSS 3.5 Dossier →
Component: web_help_desk

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software....

📅 2025-02-11
CVSS 5.5 Dossier →
Page 2 of 14 (334 Total Records)