SolarWinds vulnerabilities
218 CVEs and advisories name SolarWinds as an affected vendor, 10 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-31474This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 202
- CVE-2021-27277This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monito
- CVE-2021-27258This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2.
- CVE-2021-27240This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1.
- CVE-2020-27869This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 H
- CVE-2020-27871This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1.
- CVE-2020-27870This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1
- CVE-2020-10148SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands