Solarwinds Network_performance_monitor
8 CVEs affecting Solarwinds Network_performance_monitor. Latest disclosed: 2021-10-21. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-31474 | Critical | 9.8 | 2021-05-21 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authenticati… |
CVE-2020-27869 | High | 8.8 | 2021-02-12 | This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Au… |
CVE-2018-13442 | High | 8.8 | 2019-07-16 | SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter. |
CVE-2019-12864 | Medium | 5.5 | 2020-05-04 | SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as d… |
CVE-2021-35225 | Medium | 5.0 | 2021-10-21 | Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers… |
CVE-2017-9538 | Medium | 4.9 | 2017-10-03 | The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of serv… |
CVE-2019-12863 | Medium | 4.8 | 2020-02-25 | SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen. |
CVE-2017-9537 | Medium | 4.8 | 2017-10-03 | Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to intro… |