solarwinds Vulnerability Advisory Catalog

Total 334 security vulnerabilities recorded for solarwinds software and firmware.

← Back to All Vendors
Component: serv-u

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine....

📅 2024-06-06
CVSS 8.6 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. A high-privileged user...

📅 2024-06-04
CVSS 7.1 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. ...

📅 2024-06-04
CVSS 6.4 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.   ...

📅 2024-06-04
CVSS 7.5 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged u...

📅 2024-05-20
CVSS 7.9 Dossier →
CVE-2024-28075 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse ...

📅 2024-05-14
CVSS 9.0 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerabilit...

📅 2024-05-14
CVSS 8.6 Dossier →
Component: serv-u

A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly. ...

📅 2024-05-03
CVSS 5.7 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authen...

📅 2024-04-18
CVSS 7.5 Dossier →
Component: solarwinds_platform

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interacti...

📅 2024-04-18
CVSS 7.5 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when usin...

📅 2024-04-18
CVSS 7.0 Dossier →
Component: serv-u

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged acco...

📅 2024-04-17
CVSS 8.4 Dossier →
Component: security_event_manager

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abu...

📅 2024-03-01
CVSS 8.8 Dossier →
CVE-2024-23479 CRITICAL
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vu...

📅 2024-02-15
CVSS 9.6 Dossier →
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows a...

📅 2024-02-15
CVSS 8.0 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, thi...

📅 2024-02-15
CVSS 7.9 Dossier →
CVE-2024-23476 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, thi...

📅 2024-02-15
CVSS 9.6 Dossier →
CVE-2023-40057 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an ...

📅 2024-02-15
CVSS 9.0 Dossier →
Component: solarwinds_platform

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user au...

📅 2024-02-06
CVSS 8.0 Dossier →
Component: solarwinds_platform

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user aut...

📅 2024-02-06
CVSS 8.0 Dossier →
Component: access_rights_manager

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if t...

📅 2023-12-21
CVSS 6.5 Dossier →
Component: serv-u

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv...

📅 2023-12-06
CVSS 5.0 Dossier →
Component: solarwinds_platform

SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged ac...

📅 2023-11-28
CVSS 8.0 Dossier →
Component: network_configuration_manager

The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level...

📅 2023-11-09
CVSS 8.0 Dossier →
Page 4 of 14 (334 Total Records)