Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 347

Export CSV
CVE-2021-35235

ASP.NET Debug Feature Enabled

The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote debugging of web applications, if configured to do so. Debug mode causes ASP.NET to compile applications with extra information. The information enables a debugger to closely monitor and control the execution of an application. If an attacker could successfully start a remote debugging session, this is likely to disclose sensitive information about the web application and supporting infrastructure that may be valuable in targeting SWI with malicious intent.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Solarwinds
Products
Kiwi Syslog Server
CVE-2021-35234

Exposed Dangerous Functions - Privileged Escalation

Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.

CVSS 3.1 · 8 High EPSS 2.9% KEV · Not listed
Vendors
Solarwinds
Products
Orion Platform
CVE-2021-35233

HTTP TRACK & TRACE Methods Enabled

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client. This may lead to the disclosure of sensitive information such as internal authentication headers appended by reverse proxies.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Kiwi Syslog Server
CVE-2021-35232

Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users or insert arbitrary data into the database.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Webhelpdesk
CVE-2021-35231

Unquoted Path (SMB Login) Vulnerability

As a result of an unquoted service path vulnerability present in the Kiwi Syslog Server Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry. Example vulnerable path: "Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Kiwi Syslog Server\Parameters\Application".

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Kiwi Syslog Server
CVE-2021-35230

Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools

As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Kiwi Cattools
CVE-2021-35228

Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388

This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Middle attack in order to change header for a remote victim.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Database Performance Analyzer
CVE-2021-35227

Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2021-35225

Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Network Performance Monitor
CVE-2021-35223

Execute Command Function Allows Remote Code Execution (RCE)Vulnerability

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution.

CVSS 3.1 · 8.5 High EPSS 2.9% KEV · Not listed
Vendors
Solarwinds
Products
Serv-u
CVE-2021-35222

Resource.aspx Reflected Cross-Site Scripting Vulnerability

This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.

CVSS 3.1 · 8 High EPSS 2.6% KEV · Not listed
Vendors
Microsoft Solarwinds
Products
Windows Orion Platform
CVE-2021-35221

ImportAlert Improper Access Control Tampering Vulnerability

Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.

CVSS 3.1 · 6.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Microsoft Solarwinds
Products
Windows Orion Platform
CVE-2021-35220

EmailWebPage Command Injection RCE

Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.

CVSS 3.1 · 8.1 High EPSS 2.5% KEV · Not listed
Vendors
Solarwinds
Products
Orion Platform
CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Orion Platform
CVE-2021-35218

Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server

CVSS 3.1 · 8.9 High EPSS 76.4% KEV · Not listed
Vendors
Solarwinds
Products
Orion Platform
CVE-2021-35217

Insecure Deserialization of untrusted data causing Remote code execution vulnerability.

Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI. An Authenticated Attacker could exploit it by executing WSAsyncExecuteTasks deserialization of untrusted data.

CVSS 3.1 · 8.9 High EPSS 72.8% KEV · Not listed
Vendors
Solarwinds
Products
Patch Manager
CVE-2021-35216

Deserialization of Untrusted Data in Resource Controls Remote Code Execution

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution.

CVSS 3.1 · 8.9 High EPSS 81.4% KEV · Not listed
Vendors
Solarwinds
Products
Patch Manager
CVE-2021-35215

ActionPluginBaseView Deserialization of Untrusted Data RCE

Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

CVSS 3.1 · 8.9 High EPSS 69.9% KEV · Not listed
Vendors
Solarwinds
Products
Orion Platform
CVE-2021-35214

Session Management Vulnerability

The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple active sessions in separate browser windows, it was observed a password or email address change could be changed without terminating the user session. This issue has been resolved on September 13, 2021.

CVSS 3.1 · 4.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Solarwinds
Products
Pingdom