SolarWinds vulnerabilities
218 CVEs and advisories name SolarWinds as an affected vendor, 10 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-45718Sensitive data disclosure vulnerability
- CVE-2024-52606SolarWinds Platform Server-Side Request Forgery Vulnerability
- CVE-2024-28989SolarWinds Web Help Desk Cryptographic Key Management Vulnerability
- CVE-2024-45709SolarWinds Web Help Desk Local File Read Vulnerability
- CVE-2024-45717SolarWinds Platform Cross- Site Scripting Vulnerability
- CVE-2024-45713SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability
- CVE-2024-45711SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-45714SolarWinds Serv-U Stored XSS Vulnerability
- CVE-2024-45715SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability
- CVE-2024-45710SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- CVE-2024-28991SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- CVE-2024-28990SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability
- CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability
- CVE-2024-28986SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
- CVE-2024-23471SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23470SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability
- CVE-2024-28074SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability
- CVE-2024-23467SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23466SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-23465SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability
- CVE-2024-23469SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2024-23475SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-23472SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
- CVE-2024-28993SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-28992SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-23468SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- CVE-2024-23474SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
- CVE-2024-28995SolarWinds Serv-U L Directory Transversal Vulnerability
- CVE-2024-29004SolarWinds Platform Stored XSS Vulnerability
- CVE-2024-28999SolarWinds Platform Race Condition Vulnerability