# cve.now: SolarWinds The newest entries naming SolarWinds as an affected vendor (up to 200), of 218 in all, 10 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-28336](https://cve.now/CVE-2026-28336.md): SolarWinds Dameware Command Injection Vulnerability (CVSS 9.9) - [CVE-2026-28335](https://cve.now/CVE-2026-28335.md): SolarWinds Dameware Buffer Overflow Vulnerability (CVSS 8.4) - [CVE-2026-28327](https://cve.now/CVE-2026-28327.md): SolarWinds Dameware DLL Hijacking Vulnerability (CVSS 8.2) - [CVE-2026-28330](https://cve.now/CVE-2026-28330.md): SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability (CVSS 4.6) - [CVE-2026-28329](https://cve.now/CVE-2026-28329.md): SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) (CVSS 6.4) - [CVE-2026-28328](https://cve.now/CVE-2026-28328.md): SolarWinds Observability Self-Hosted broken authorization schema (CVSS 8.8) - [CVE-2026-28331](https://cve.now/CVE-2026-28331.md): SolarWinds Patch Manager Sensitive Information Exposure Vulnerability (CVSS 4.4) - [CVE-2026-28325](https://cve.now/CVE-2026-28325.md): SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability (CVSS 8.8) - [CVE-2026-28324](https://cve.now/CVE-2026-28324.md): SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVSS 9.8) - [CVE-2026-28326](https://cve.now/CVE-2026-28326.md): SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability (CVSS 8.8) - [CVE-2026-28323](https://cve.now/CVE-2026-28323.md): SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVSS 9.8) - [CVE-2026-28321](https://cve.now/CVE-2026-28321.md): SolarWinds Serv-U Broken Access Control Vulnerability (CVSS 9.1) - [CVE-2026-28317](https://cve.now/CVE-2026-28317.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28316](https://cve.now/CVE-2026-28316.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28315](https://cve.now/CVE-2026-28315.md): SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability (CVSS 6.2) - [CVE-2026-28314](https://cve.now/CVE-2026-28314.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28313](https://cve.now/CVE-2026-28313.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28312](https://cve.now/CVE-2026-28312.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1) - [CVE-2026-28310](https://cve.now/CVE-2026-28310.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1) - [CVE-2026-28309](https://cve.now/CVE-2026-28309.md): SolarWinds Serv-U Broken Access Control Vulnerability (CVSS 9.1) - [CVE-2026-28308](https://cve.now/CVE-2026-28308.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28307](https://cve.now/CVE-2026-28307.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1) - [CVE-2026-28306](https://cve.now/CVE-2026-28306.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1) - [CVE-2026-28305](https://cve.now/CVE-2026-28305.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28304](https://cve.now/CVE-2026-28304.md): SolarWinds Serv-U Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2026-28302](https://cve.now/CVE-2026-28302.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1) - [CVE-2026-28322](https://cve.now/CVE-2026-28322.md): SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability (CVSS 5.6) - [CVE-2026-28301](https://cve.now/CVE-2026-28301.md): SolarWinds Observability Self-Hosted Open Redirect Vulnerability (CVSS 4.8) - [CVE-2026-28318](https://cve.now/CVE-2026-28318.md): SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability (CVSS 7.5, KEV) - [CVE-2026-28299](https://cve.now/CVE-2026-28299.md): SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVSS 8.2) - [CVE-2026-28298](https://cve.now/CVE-2026-28298.md): SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability (CVSS 5.9) - [CVE-2026-28297](https://cve.now/CVE-2026-28297.md): SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability (CVSS 6.1) - [CVE-2025-40541](https://cve.now/CVE-2025-40541.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2025-40540](https://cve.now/CVE-2025-40540.md): SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2025-40539](https://cve.now/CVE-2025-40539.md): SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2025-40538](https://cve.now/CVE-2025-40538.md): SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2025-40554](https://cve.now/CVE-2025-40554.md): SolarWinds Web Help Desk Authentication Bypass Vulnerability (CVSS 9.8) - [CVE-2025-40553](https://cve.now/CVE-2025-40553.md): SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8) - [CVE-2025-40552](https://cve.now/CVE-2025-40552.md): SolarWinds Web Help Desk Authentication Bypass Vulnerability (CVSS 9.8) - [CVE-2025-40551](https://cve.now/CVE-2025-40551.md): SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, KEV) - [CVE-2025-40537](https://cve.now/CVE-2025-40537.md): SolarWinds Web Help Desk Hardcoded Credentials Vulnerability (CVSS 7.5) - [CVE-2025-40536](https://cve.now/CVE-2025-40536.md): SolarWinds Web Help Desk Security Control Bypass Vulnerability (CVSS 8.1, KEV) - [CVE-2025-40545](https://cve.now/CVE-2025-40545.md): SolarWinds Observability Self-Hosted Open Redirection Vulnerability (CVSS 4.8) - [CVE-2025-26391](https://cve.now/CVE-2025-26391.md): SolarWinds Observability Self-Hosted XSS Vulnerability (CVSS 5.4) - [CVE-2025-40549](https://cve.now/CVE-2025-40549.md): SolarWinds Serv-U Path Restriction Bypass Vulnerability (CVSS 9.1) - [CVE-2025-40548](https://cve.now/CVE-2025-40548.md): SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2025-40547](https://cve.now/CVE-2025-40547.md): SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability (CVSS 9.1) - [CVE-2025-26392](https://cve.now/CVE-2025-26392.md): SolarWinds Observability Self-Hosted SQL Injection Vulnerability (CVSS 5.4) - [CVE-2025-26399](https://cve.now/CVE-2025-26399.md): SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability (CVSS 9.8, KEV) - [CVE-2024-28988](https://cve.now/CVE-2024-28988.md): SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability (CVSS 9.8) - [CVE-2025-26398](https://cve.now/CVE-2025-26398.md): SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability (CVSS 5.6) - [CVE-2025-26400](https://cve.now/CVE-2025-26400.md): SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability (CVSS 5.3) - [CVE-2025-26397](https://cve.now/CVE-2025-26397.md): SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability (CVSS 7.8) - [CVE-2025-26395](https://cve.now/CVE-2025-26395.md): SolarWinds SWOSH DOM-based reflective XSS Vulnerability (CVSS 7.1) - [CVE-2025-26394](https://cve.now/CVE-2025-26394.md): SolarWinds SWOSH Open Redirection Vulnerability (CVSS 4.8) - [CVE-2025-26396](https://cve.now/CVE-2025-26396.md): SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability (CVSS 7.8) - [CVE-2024-45712](https://cve.now/CVE-2024-45712.md): SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability (CVSS 2.6) - [CVE-2025-26393](https://cve.now/CVE-2025-26393.md): SolarWinds Service Desk Broken Access Control Vulnerability (CVSS 5.4) - [CVE-2024-52611](https://cve.now/CVE-2024-52611.md): SolarWinds Platform Information Disclosure Vulnerability (CVSS 3.5) - [CVE-2024-52612](https://cve.now/CVE-2024-52612.md): SolarWinds Platform Reflected Cross-Site Scripting Vulnerability (CVSS 6.8) - [CVE-2024-45718](https://cve.now/CVE-2024-45718.md): Sensitive data disclosure vulnerability (CVSS 4.6) - [CVE-2024-52606](https://cve.now/CVE-2024-52606.md): SolarWinds Platform Server-Side Request Forgery Vulnerability (CVSS 3.5) - [CVE-2024-28989](https://cve.now/CVE-2024-28989.md): SolarWinds Web Help Desk Cryptographic Key Management Vulnerability (CVSS 5.5) - [CVE-2024-45709](https://cve.now/CVE-2024-45709.md): SolarWinds Web Help Desk Local File Read Vulnerability (CVSS 5.3) - [CVE-2024-45717](https://cve.now/CVE-2024-45717.md): SolarWinds Platform Cross- Site Scripting Vulnerability (CVSS 7.0) - [CVE-2024-45713](https://cve.now/CVE-2024-45713.md): SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability (CVSS 5.1) - [CVE-2024-45711](https://cve.now/CVE-2024-45711.md): SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability (CVSS 7.5) - [CVE-2024-45714](https://cve.now/CVE-2024-45714.md): SolarWinds Serv-U Stored XSS Vulnerability (CVSS 4.8) - [CVE-2024-45715](https://cve.now/CVE-2024-45715.md): SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability (CVSS 7.1) - [CVE-2024-45710](https://cve.now/CVE-2024-45710.md): SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8) - [CVE-2024-28991](https://cve.now/CVE-2024-28991.md): SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution (CVSS 9.0) - [CVE-2024-28990](https://cve.now/CVE-2024-28990.md): SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability (CVSS 6.3) - [CVE-2024-28987](https://cve.now/CVE-2024-28987.md): SolarWinds Web Help Desk Hardcoded Credential Vulnerability (CVSS 9.1, KEV) - [CVE-2024-28986](https://cve.now/CVE-2024-28986.md): SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability (CVSS 9.8, KEV) - [CVE-2024-23471](https://cve.now/CVE-2024-23471.md): SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2024-23470](https://cve.now/CVE-2024-23470.md): SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability (CVSS 9.6) - [CVE-2024-28074](https://cve.now/CVE-2024-28074.md): SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2024-23467](https://cve.now/CVE-2024-23467.md): SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2024-23466](https://cve.now/CVE-2024-23466.md): SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2024-23465](https://cve.now/CVE-2024-23465.md): SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability (CVSS 8.3) - [CVE-2024-23469](https://cve.now/CVE-2024-23469.md): SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2024-23475](https://cve.now/CVE-2024-23475.md): SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability (CVSS 9.6) - [CVE-2024-23472](https://cve.now/CVE-2024-23472.md): SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability (CVSS 9.6) - [CVE-2024-28993](https://cve.now/CVE-2024-28993.md): SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability (CVSS 7.6) - [CVE-2024-28992](https://cve.now/CVE-2024-28992.md): SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability (CVSS 7.6) - [CVE-2024-23468](https://cve.now/CVE-2024-23468.md): SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability (CVSS 7.6) - [CVE-2024-23474](https://cve.now/CVE-2024-23474.md): SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability (CVSS 7.6) - [CVE-2024-28995](https://cve.now/CVE-2024-28995.md): SolarWinds Serv-U L Directory Transversal Vulnerability (CVSS 8.6, KEV) - [CVE-2024-29004](https://cve.now/CVE-2024-29004.md): SolarWinds Platform Stored XSS Vulnerability (CVSS 7.1) - [CVE-2024-28999](https://cve.now/CVE-2024-28999.md): SolarWinds Platform Race Condition Vulnerability (CVSS 6.4) - [CVE-2024-28996](https://cve.now/CVE-2024-28996.md): SolarWinds Platform SWQL Injection Vulnerability (CVSS 7.5) - [CVE-2024-29000](https://cve.now/CVE-2024-29000.md): SolarWinds Platform Reflected XSS Vulnerability (CVSS 7.9) - [CVE-2024-23473](https://cve.now/CVE-2024-23473.md): SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability (CVSS 8.6) - [CVE-2024-28075](https://cve.now/CVE-2024-28075.md): SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution (CVSS 9.0) - [CVE-2024-28072](https://cve.now/CVE-2024-28072.md): Arbitrary File Overwrite Vulnerability (CVSS 5.7) - [CVE-2024-29003](https://cve.now/CVE-2024-29003.md): SolarWinds Platform Cross Site Scripting Vulnerability (CVSS 7.5) - [CVE-2024-29001](https://cve.now/CVE-2024-29001.md): SolarWinds Platform SWQL Injection Vulnerability (CVSS 7.5) - [CVE-2024-28076](https://cve.now/CVE-2024-28076.md): SolarWinds Platform Arbitrary Open Redirection Vulnerability (CVSS 7.0) - [CVE-2024-28073](https://cve.now/CVE-2024-28073.md): SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability (CVSS 8.4) - [CVE-2024-0692](https://cve.now/CVE-2024-0692.md): SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8) - [CVE-2023-40057](https://cve.now/CVE-2023-40057.md): SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution (CVSS 9.0) - [CVE-2024-23477](https://cve.now/CVE-2024-23477.md): SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability (CVSS 7.9) - [CVE-2024-23476](https://cve.now/CVE-2024-23476.md): SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2024-23478](https://cve.now/CVE-2024-23478.md): SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution (CVSS 8.0) - [CVE-2024-23479](https://cve.now/CVE-2024-23479.md): SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability (CVSS 9.6) - [CVE-2023-35188](https://cve.now/CVE-2023-35188.md): SQL Injection Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-50395](https://cve.now/CVE-2023-50395.md): SQL Injection Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-40058](https://cve.now/CVE-2023-40058.md): Sensitive Information Disclosure Vulnerability (CVSS 6.5) - [CVE-2023-40053](https://cve.now/CVE-2023-40053.md): HTML injection Vulnerability in Serv-U 15.4 (CVSS 5.0) - [CVE-2023-40056](https://cve.now/CVE-2023-40056.md): SolarWinds Platform SQL Injection Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-40055](https://cve.now/CVE-2023-40055.md): SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-40054](https://cve.now/CVE-2023-40054.md): SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-33228](https://cve.now/CVE-2023-33228.md): SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability (CVSS 4.5) - [CVE-2023-33227](https://cve.now/CVE-2023-33227.md): Directory Traversal Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-33226](https://cve.now/CVE-2023-33226.md): Directory Traversal Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-40061](https://cve.now/CVE-2023-40061.md): Insecure Job Execution Mechanism Vulnerability (CVSS 8.8) - [CVE-2023-40062](https://cve.now/CVE-2023-40062.md): Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-35181](https://cve.now/CVE-2023-35181.md): SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability (CVSS 7.8) - [CVE-2023-35187](https://cve.now/CVE-2023-35187.md): SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8) - [CVE-2023-35185](https://cve.now/CVE-2023-35185.md): SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability (CVSS 6.8) - [CVE-2023-35183](https://cve.now/CVE-2023-35183.md): SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability (CVSS 7.8) - [CVE-2023-35180](https://cve.now/CVE-2023-35180.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-35182](https://cve.now/CVE-2023-35182.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8) - [CVE-2023-35184](https://cve.now/CVE-2023-35184.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8) - [CVE-2023-35186](https://cve.now/CVE-2023-35186.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.0) - [CVE-2023-23845](https://cve.now/CVE-2023-23845.md): SolarWinds Platform Exposed Dangerous Method Vulnerability (CVSS 6.8) - [CVE-2023-23840](https://cve.now/CVE-2023-23840.md): SolarWinds Platform Exposed Dangerous Method Vulnerability (CVSS 6.8) - [CVE-2023-40060](https://cve.now/CVE-2023-40060.md): 2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1 (CVSS 7.2) - [CVE-2023-35179](https://cve.now/CVE-2023-35179.md): 2FA/MFA Bypass Vulnerability in Serv-U 15.4 (CVSS 7.2) - [CVE-2023-23842](https://cve.now/CVE-2023-23842.md): SolarWinds Network Configuration Manager Directory Traversal Vulnerability (CVSS 7.2) - [CVE-2023-3622](https://cve.now/CVE-2023-3622.md): Access Control Bypass Vulnerability in the SolarWinds Platform (CVSS 4.3) - [CVE-2023-33229](https://cve.now/CVE-2023-33229.md): SolarWinds Platform Incorrect Input Neutralization Vulnerability (CVSS 3.5) - [CVE-2023-23843](https://cve.now/CVE-2023-23843.md): SolarWinds Platform Incorrect Comparison Vulnerability (CVSS 7.2) - [CVE-2023-33224](https://cve.now/CVE-2023-33224.md): SolarWinds Platform Incorrect Behavior Order Vulnerability (CVSS 7.2) - [CVE-2023-33225](https://cve.now/CVE-2023-33225.md): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2) - [CVE-2023-23844](https://cve.now/CVE-2023-23844.md): SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability (CVSS 7.2) - [CVE-2023-33231](https://cve.now/CVE-2023-33231.md): XSS in SolarWinds Database Performance Analyzer 2023.2 (CVSS 6.1) - [CVE-2023-23841](https://cve.now/CVE-2023-23841.md): SolarWinds Serv-U Exposure of Sensitive Information Vulnerability (CVSS 7.5) - [CVE-2023-23839](https://cve.now/CVE-2023-23839.md): SolarWinds Platform Exposure of Sensitive Information Vulnerability (CVSS 6.5) - [CVE-2023-23838](https://cve.now/CVE-2023-23838.md): Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1 (CVSS 6.5) - [CVE-2023-23837](https://cve.now/CVE-2023-23837.md): No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1 (CVSS 7.5) - [CVE-2022-47509](https://cve.now/CVE-2022-47509.md): SolarWinds Platform Incorrect Input Neutralization Vulnerability (CVSS 6.1) - [CVE-2022-47505](https://cve.now/CVE-2022-47505.md): SolarWinds Platform Local Privilege Escalation Vulnerability (CVSS 7.8) - [CVE-2023-23836](https://cve.now/CVE-2023-23836.md): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2) - [CVE-2022-47508](https://cve.now/CVE-2022-47508.md): Disable NTLM: SAM 2022.4 (CVSS 7.5) - [CVE-2022-47507](https://cve.now/CVE-2022-47507.md): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2) - [CVE-2022-47506](https://cve.now/CVE-2022-47506.md): SolarWinds Platform Directory Traversal Vulnerability (CVSS 7.8) - [CVE-2022-47504](https://cve.now/CVE-2022-47504.md): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2) - [CVE-2022-47503](https://cve.now/CVE-2022-47503.md): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2) - [CVE-2022-38111](https://cve.now/CVE-2022-38111.md): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2) - [CVE-2022-38112](https://cve.now/CVE-2022-38112.md): Sensitive Information Disclosure Vulnerability (CVSS 7.5) - [CVE-2022-38110](https://cve.now/CVE-2022-38110.md): Reflected Cross-Site Scripting Vulnerability (CVSS 5.4) - [CVE-2022-47512](https://cve.now/CVE-2022-47512.md): Sensitive Data Disclosure Vulnerability (CVSS 5.5) - [CVE-2022-38106](https://cve.now/CVE-2022-38106.md): Cross-Site Scripting Vulnerability in Serv-U Web Client (CVSS 5.4) - [CVE-2021-35252](https://cve.now/CVE-2021-35252.md): Common Key Vulnerability in Serv-U FTP Server (CVSS 7.5) - [CVE-2022-36964](https://cve.now/CVE-2022-36964.md): SolarWinds Platform Deserialization of Untrusted Data (CVSS 8.8) - [CVE-2022-36962](https://cve.now/CVE-2022-36962.md): SolarWinds Platform Command Injection (CVSS 7.2) - [CVE-2022-36960](https://cve.now/CVE-2022-36960.md): SolarWinds Platform Improper Input Validation (CVSS 8.8) - [CVE-2021-35246](https://cve.now/CVE-2021-35246.md): Unprotected Transport of Credentials (HSTS) Vulnerability (CVSS 5.3) - [CVE-2022-38115](https://cve.now/CVE-2022-38115.md): Insecure Methods Vulnerability (CVSS 5.3) - [CVE-2022-38114](https://cve.now/CVE-2022-38114.md): Client-Side Desync Vulnerability (CVSS 6.1) - [CVE-2022-38113](https://cve.now/CVE-2022-38113.md): Information Disclosure Vulnerability (CVSS 5.3) - [CVE-2022-38108](https://cve.now/CVE-2022-38108.md): SolarWinds Platform Deserialization of Untrusted Data (CVSS 7.2) - [CVE-2022-36958](https://cve.now/CVE-2022-36958.md): SolarWinds Platform Deserialization of Untrusted Data (CVSS 8.8) - [CVE-2022-36957](https://cve.now/CVE-2022-36957.md): SolarWinds Platform Deserialization of Untrusted Data (CVSS 7.2) - [CVE-2022-36966](https://cve.now/CVE-2022-36966.md): Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6 (CVSS 5.4) - [CVE-2022-38107](https://cve.now/CVE-2022-38107.md): Sensitive Data Disclosure Vulnerability (CVSS 5.3) - [CVE-2021-35226](https://cve.now/CVE-2021-35226.md): Hashed Credential Exposure Vulnerability (CVSS 6.5) - [CVE-2022-36965](https://cve.now/CVE-2022-36965.md): Stored and DOM XSS in QoE Applications: Orion Platform (CVSS 6.1) - [CVE-2022-36961](https://cve.now/CVE-2022-36961.md): Orion Platform SQL Injection Privilege Escalation Vulnerability (CVSS 8.8) - [CVE-2021-35249](https://cve.now/CVE-2021-35249.md): Domain Admin Broken Access Control (CVSS 4.3) - [CVE-2021-35250](https://cve.now/CVE-2021-35250.md): Directory Transversal Vulnerability in Serv-U 15.3 (CVSS 7.5) - [CVE-2021-35229](https://cve.now/CVE-2021-35229.md): Cross-Site Scripting Vulnerability using SQL Query (CVSS 6.8) - [CVE-2021-35254](https://cve.now/CVE-2021-35254.md): Authenticated Remote Code Execution in WebHelpDesk 12.7.8 (CVSS 8.2) - [CVE-2021-35251](https://cve.now/CVE-2021-35251.md): Sensitive Data Disclosure Vulnerability (CVSS 5.3) - [CVE-2021-35247](https://cve.now/CVE-2021-35247.md): Improper Input Validation Vulnerability in Serv-U (CVSS 4.3, KEV) - [CVE-2021-35232](https://cve.now/CVE-2021-35232.md): Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries (CVSS 6.8) - [CVE-2021-35243](https://cve.now/CVE-2021-35243.md): HTTP PUT & DELETE Methods Enabled (CVSS 5.3) - [CVE-2021-35234](https://cve.now/CVE-2021-35234.md): Exposed Dangerous Functions - Privileged Escalation (CVSS 8.0) - [CVE-2021-35244](https://cve.now/CVE-2021-35244.md): Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6 (CVSS 6.8) - [CVE-2021-35248](https://cve.now/CVE-2021-35248.md): Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users (CVSS 6.8) - [CVE-2021-35242](https://cve.now/CVE-2021-35242.md): A valid CSRF token is present in response to an invalid request (CVSS 8.3) - [CVE-2021-35245](https://cve.now/CVE-2021-35245.md): Broken Access Control Vulnerability for SolarWinds Serv-U (CVSS 8.4) - [CVE-2021-35237](https://cve.now/CVE-2021-35237.md): Clickjacking Vulnerability (CVSS 5.0) - [CVE-2021-35236](https://cve.now/CVE-2021-35236.md): Missing Secure Flag From SSL Cookie (CVSS 3.1) - [CVE-2021-35235](https://cve.now/CVE-2021-35235.md): ASP.NET Debug Feature Enabled (CVSS 5.3) - [CVE-2021-35233](https://cve.now/CVE-2021-35233.md): HTTP TRACK & TRACE Methods Enabled (CVSS 5.3) - [CVE-2021-35231](https://cve.now/CVE-2021-35231.md): Unquoted Path (SMB Login) Vulnerability (CVSS 6.7) - [CVE-2021-35230](https://cve.now/CVE-2021-35230.md): Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools (CVSS 6.7) - [CVE-2021-35228](https://cve.now/CVE-2021-35228.md): Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388 (CVSS 5.5) - [CVE-2021-35227](https://cve.now/CVE-2021-35227.md): Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM (CVSS 4.7) - [CVE-2021-35225](https://cve.now/CVE-2021-35225.md): Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5 (CVSS 5.0) - [CVE-2021-35214](https://cve.now/CVE-2021-35214.md): Session Management Vulnerability (CVSS 4.8) - [CVE-2021-35217](https://cve.now/CVE-2021-35217.md): Insecure Deserialization of untrusted data causing Remote code execution vulnerability. (CVSS 8.9) - [CVE-2021-35218](https://cve.now/CVE-2021-35218.md): Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.9) - [CVE-2021-35216](https://cve.now/CVE-2021-35216.md): Deserialization of Untrusted Data in Resource Controls Remote Code Execution (CVSS 8.9) - [CVE-2021-35215](https://cve.now/CVE-2021-35215.md): ActionPluginBaseView Deserialization of Untrusted Data RCE (CVSS 8.9) - [CVE-2021-35238](https://cve.now/CVE-2021-35238.md): Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability (CVSS 4.8) - [CVE-2021-35212](https://cve.now/CVE-2021-35212.md): Blind SQL injection Vulnerability (CVSS 8.9) - [CVE-2021-35223](https://cve.now/CVE-2021-35223.md): Execute Command Function Allows Remote Code Execution (RCE)Vulnerability (CVSS 8.5) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/solarwinds Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.