SolarWinds vulnerabilities
218 CVEs and advisories name SolarWinds as an affected vendor, 10 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-35183SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
- CVE-2023-35180SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2023-35182SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2023-35184SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2023-35186SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2023-23845SolarWinds Platform Exposed Dangerous Method Vulnerability
- CVE-2023-23840SolarWinds Platform Exposed Dangerous Method Vulnerability
- CVE-2023-400602FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1
- CVE-2023-351792FA/MFA Bypass Vulnerability in Serv-U 15.4
- CVE-2023-23842SolarWinds Network Configuration Manager Directory Traversal Vulnerability
- CVE-2023-3622Access Control Bypass Vulnerability in the SolarWinds Platform
- CVE-2023-33229SolarWinds Platform Incorrect Input Neutralization Vulnerability
- CVE-2023-23843SolarWinds Platform Incorrect Comparison Vulnerability
- CVE-2023-33224SolarWinds Platform Incorrect Behavior Order Vulnerability
- CVE-2023-33225SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2023-23844SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
- CVE-2023-33231XSS in SolarWinds Database Performance Analyzer 2023.2
- CVE-2023-23841SolarWinds Serv-U Exposure of Sensitive Information Vulnerability
- CVE-2023-23839SolarWinds Platform Exposure of Sensitive Information Vulnerability
- CVE-2023-23838Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1
- CVE-2023-23837No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
- CVE-2022-47509SolarWinds Platform Incorrect Input Neutralization Vulnerability
- CVE-2022-47505SolarWinds Platform Local Privilege Escalation Vulnerability
- CVE-2023-23836SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2022-47508Disable NTLM: SAM 2022.4
- CVE-2022-47507SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2022-47506SolarWinds Platform Directory Traversal Vulnerability
- CVE-2022-47504SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2022-47503SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2022-38111SolarWinds Platform Deserialization of Untrusted Data Vulnerability