Solarwinds
Page 3 of 3 — Solarwinds CVEs from a corpus of 250, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32076 | Medium | 5.3 | 2021-08-26 | Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizar… |
CVE-2021-28674 | Medium | 5.4 | 2021-07-30 | The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node (outside of the attacker's perimeter) v… |
CVE-2021-35211 | Critical | 9.0 | 2021-07-14 | Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited… |
CVE-2021-31217 | Critical | 9.1 | 2021-07-13 | In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM. |
CVE-2021-31475 | High | 8.8 | 2021-05-21 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication… |
CVE-2021-31474 | Critical | 9.8 | 2021-05-21 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authenticati… |
CVE-2021-32604 | Medium | 5.4 | 2021-05-11 | Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS." |
CVE-2021-25179 | Medium | 6.1 | 2021-05-05 | SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. |
CVE-2020-22428 | Medium | 4.8 | 2021-05-05 | SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload. |
CVE-2021-3154 | High | 7.5 | 2021-05-04 | An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a di… |
CVE-2021-27277 | High | 7.8 | 2021-04-22 | This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attack… |
CVE-2021-27258 | Critical | 9.8 | 2021-04-14 | This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not… |
CVE-2021-27240 | High | 7.8 | 2021-03-29 | This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain… |
CVE-2021-3109 | Medium | 4.8 | 2021-03-26 | The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account. |
CVE-2020-35856 | Medium | 4.8 | 2021-03-26 | SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page. |
CVE-2020-27869 | High | 8.8 | 2021-02-12 | This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Au… |
CVE-2020-27871 | High | 7.2 | 2021-02-10 | This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication i… |
CVE-2020-27870 | Medium | 6.5 | 2021-02-10 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is… |
CVE-2021-25276 | High | 7.1 | 2021-02-03 | In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files (that include users' password hashes) that is world readable an… |
CVE-2021-25275 | High | 7.8 | 2021-02-03 | SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to a… |
CVE-2021-25274 | Critical | 9.8 | 2021-02-03 | The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a… |
CVE-2020-35482 | Medium | 5.4 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. |
CVE-2020-35481 | Critical | 9.8 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection. |
CVE-2020-28001 | Medium | 5.4 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. |
CVE-2020-27994 | Medium | 6.5 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal. |
CVE-2019-16961 | Medium | 5.4 | 2021-01-15 | SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name. |
CVE-2019-16954 | Medium | 5.4 | 2021-01-06 | SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. |
CVE-2019-16960 | Medium | 5.4 | 2021-01-04 | SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. |
CVE-2019-16956 | Medium | 5.4 | 2021-01-04 | SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. |
CVE-2020-10148 | Critical | 9.8 | 2020-12-29 | The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a… |
CVE-2019-16959 | Medium | 6.5 | 2020-12-21 | SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. |
CVE-2019-16957 | Medium | 5.4 | 2020-12-18 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. |
CVE-2019-16955 | Medium | 5.4 | 2020-12-18 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. |
CVE-2020-25622 | High | 8.8 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. |
CVE-2020-25621 | High | 8.4 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a n… |
CVE-2020-25620 | High | 7.8 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nablea… |
CVE-2020-25619 | Medium | 4.4 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker ca… |
CVE-2020-25618 | High | 8.8 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effective… |
CVE-2020-25617 | High | 8.8 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-… |
CVE-2018-16243 | Medium | 5.4 | 2020-12-15 | SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen… |
CVE-2019-16958 | Medium | 5.4 | 2020-12-01 | Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name. |
CVE-2020-15910 | Medium | 4.7 | 2020-10-19 | SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascrip… |
CVE-2020-15909 | High | 8.8 | 2020-10-19 | SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Central JSESSIONID cookie attribute is not… |
CVE-2020-13169 | Critical | 9.0 | 2020-09-17 | Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to th… |
CVE-2020-15576 | High | 7.5 | 2020-07-07 | SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response. |
CVE-2020-15575 | Medium | 6.1 | 2020-07-07 | SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194. |
CVE-2020-15574 | High | 7.5 | 2020-07-07 | SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893. |
CVE-2020-15573 | Medium | 6.1 | 2020-07-07 | SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421. |
CVE-2020-15543 | Critical | 9.8 | 2020-07-05 | SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path. |
CVE-2020-15542 | Critical | 9.8 | 2020-07-05 | SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command. |
CVE-2020-15541 | Critical | 9.8 | 2020-07-05 | SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution. |
CVE-2020-14007 | Medium | 5.4 | 2020-06-24 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. |
CVE-2020-14006 | Medium | 5.4 | 2020-06-24 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. |
CVE-2020-14005 | High | 8.8 | 2020-06-24 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined even… |
CVE-2020-13912 | High | 7.3 | 2020-06-07 | SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain… |
CVE-2020-12608 | High | 7.8 | 2020-05-07 | An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file p… |
CVE-2019-12864 | Medium | 5.5 | 2020-05-04 | SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as d… |
CVE-2019-20002 | High | 7.8 | 2020-04-27 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help r… |
CVE-2020-5734 | High | 7.5 | 2020-04-07 | Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during… |
CVE-2019-12769 | High | 8.8 | 2020-03-18 | SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality vi… |
CVE-2019-12863 | Medium | 4.8 | 2020-02-25 | SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen. |
CVE-2019-12954 | Medium | 5.4 | 2020-02-17 | SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VI… |
CVE-2020-7984 | High | 7.5 | 2020-01-26 | SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe… |
CVE-2019-17127 | Medium | 6.1 | 2020-01-17 | A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many application forms. An attacker c… |
CVE-2019-17125 | Medium | 6.1 | 2020-01-17 | A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many forms. An attacker can inject… |
CVE-2019-19829 | Medium | 5.4 | 2019-12-18 | A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934… |
CVE-2019-13182 | Medium | 5.4 | 2019-12-16 | A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7. |
CVE-2019-13181 | Medium | 6.5 | 2019-12-16 | A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7. |
CVE-2019-3980 | Critical | 9.8 | 2019-10-08 | The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on… |
CVE-2018-19386 | Medium | 6.1 | 2019-08-14 | SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected i… |
CVE-2018-13442 | High | 8.8 | 2019-07-16 | SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter. |
CVE-2019-12181 | High | 8.8 | 2019-06-17 | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. |
CVE-2019-3957 | High | 7.4 | 2019-06-07 | Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSigna… |
CVE-2018-19999 | High | 7.8 | 2019-06-07 | The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the… |
CVE-2019-9017 | High | 7.5 | 2019-05-02 | DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name. |
CVE-2018-19934 | Medium | 4.8 | 2019-03-21 | SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter. |
CVE-2018-15906 | High | 7.2 | 2019-03-21 | SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. |
CVE-2019-9546 | Critical | 9.8 | 2019-03-01 | SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service. |
CVE-2019-8917 | Critical | 9.8 | 2019-02-18 | SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpB… |
CVE-2018-16792 | Critical | 9.1 | 2018-12-05 | SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate d… |
CVE-2018-16791 | Critical | 9.8 | 2018-12-05 | In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allow… |
CVE-2018-12897 | High | 7.8 | 2018-09-07 | SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. |
CVE-2018-10241 | Medium | 6.5 | 2018-05-16 | A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL pointer dereferenc… |
CVE-2018-10240 | High | 7.3 | 2018-05-16 | SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL p… |
CVE-2012-2576 | Critical | 9.8 | 2017-12-20 | SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backu… |
CVE-2017-9538 | Medium | 4.9 | 2017-10-03 | The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of serv… |
CVE-2017-9537 | Medium | 4.8 | 2017-10-03 | Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to intro… |
CVE-2017-7722 | Critical | 10.0 | 2017-04-12 | In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the def… |
CVE-2017-7647 | High | 8.8 | 2017-04-10 | SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands. |
CVE-2017-7646 | Medium | 6.5 | 2017-04-10 | SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary fi… |
CVE-2017-5199 | High | 8.8 | 2017-03-24 | The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scr… |
CVE-2017-5198 | High | 8.8 | 2017-03-24 | SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/script… |
CVE-2017-6803 | High | 8.8 | 2017-03-20 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remot… |
CVE-2016-5709 | Medium | 4.7 | 2016-06-24 | SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges… |
CVE-2016-3643 | High | 7.8 | 2016-06-17 | SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat… |
CVE-2016-3642 | Critical | 9.8 | 2016-06-17 | The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java obje… |
CVE-2016-4350 | Critical | 9.8 | 2016-05-09 | Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storage Manager (STM)) be… |
CVE-2015-8220 | | 2015-11-17 | Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute… | |
CVE-2015-7840 | | 2015-10-15 | The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecif… | |
CVE-2015-7839 | | 2015-10-15 | SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonse… |