SolarWinds vulnerabilities
218 CVEs and advisories name SolarWinds as an affected vendor, 10 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-38112Sensitive Information Disclosure Vulnerability
- CVE-2022-38110Reflected Cross-Site Scripting Vulnerability
- CVE-2022-47512Sensitive Data Disclosure Vulnerability
- CVE-2022-38106Cross-Site Scripting Vulnerability in Serv-U Web Client
- CVE-2021-35252Common Key Vulnerability in Serv-U FTP Server
- CVE-2022-36964SolarWinds Platform Deserialization of Untrusted Data
- CVE-2022-36962SolarWinds Platform Command Injection
- CVE-2022-36960SolarWinds Platform Improper Input Validation
- CVE-2021-35246Unprotected Transport of Credentials (HSTS) Vulnerability
- CVE-2022-38115Insecure Methods Vulnerability
- CVE-2022-38114Client-Side Desync Vulnerability
- CVE-2022-38113Information Disclosure Vulnerability
- CVE-2022-38108SolarWinds Platform Deserialization of Untrusted Data
- CVE-2022-36958SolarWinds Platform Deserialization of Untrusted Data
- CVE-2022-36957SolarWinds Platform Deserialization of Untrusted Data
- CVE-2022-36966Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
- CVE-2022-38107Sensitive Data Disclosure Vulnerability
- CVE-2021-35226Hashed Credential Exposure Vulnerability
- CVE-2022-36965Stored and DOM XSS in QoE Applications: Orion Platform
- CVE-2022-36961Orion Platform SQL Injection Privilege Escalation Vulnerability
- CVE-2021-35249Domain Admin Broken Access Control
- CVE-2021-35250Directory Transversal Vulnerability in Serv-U 15.3
- CVE-2021-35229Cross-Site Scripting Vulnerability using SQL Query
- CVE-2021-35254Authenticated Remote Code Execution in WebHelpDesk 12.7.8
- CVE-2021-35251Sensitive Data Disclosure Vulnerability
- CVE-2021-35247Improper Input Validation Vulnerability in Serv-U
- CVE-2021-35232Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries
- CVE-2021-35243HTTP PUT & DELETE Methods Enabled
- CVE-2021-35234Exposed Dangerous Functions - Privileged Escalation
- CVE-2021-35244Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6