Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2023-40056

SolarWinds Platform SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account.

CVSS 3.1 · 8 High EPSS 4.8% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-3622

Access Control Bypass Vulnerability in the SolarWinds Platform

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-33229

SolarWinds Platform Incorrect Input Neutralization Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-33224

SolarWinds Platform Incorrect Behavior Order Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

CVSS 3.1 · 7.2 High EPSS 2.8% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-23844

SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

CVSS 3.1 · 7.2 High EPSS 3.0% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-23843

SolarWinds Platform Incorrect Comparison Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

CVSS 3.1 · 7.2 High EPSS 2.6% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2024-45715

SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform