Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 347

Export CSV
CVE-2025-40540

SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Serv-u
CVE-2025-40541

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability

An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Serv-u
CVE-2023-23841

SolarWinds Serv-U Exposure of Sensitive Information Vulnerability

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.  Part of the URL of the request discloses sensitive data.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Serv-u
CVE-2022-38106

Cross-Site Scripting Vulnerability in Serv-U Web Client

This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Serv-u
CVE-2021-35226

Hashed Credential Exposure Vulnerability

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Network Configuration Manager
CVE-2025-26391

SolarWinds Observability Self-Hosted XSS Vulnerability

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Observability Self-hosted
CVE-2025-40545

SolarWinds Observability Self-Hosted Open Redirection Vulnerability

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Observability Self-hosted
CVE-2024-45712

SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Serv-u
CVE-2025-26400

SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability

SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure. A valid, low-privilege access is required unless the attacker had access to the local server to modify configuration files.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Web Help Desk
CVE-2025-26394

SolarWinds SWOSH Open Redirection Vulnerability

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Observability Self-hosted
CVE-2025-26395

SolarWinds SWOSH DOM-based reflective XSS Vulnerability

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Observability Self-hosted
CVE-2025-26397

SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Observability Self-hosted
CVE-2025-26392

SolarWinds Observability Self-Hosted SQL Injection Vulnerability

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Observability Self-hosted Observability Self Hosted
CVE-2024-28986

SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.   However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

CVSS 3.1 · 9.8 Critical EPSS 84.6% KEV · Listed
Vendors
Solarwinds
Products
Web Help Desk Webhelpdesk
CVE-2024-28987

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

CVSS 3.1 · 9.1 Critical EPSS 93.3% KEV · Listed
Vendors
Solarwinds
Products
Web Help Desk Webhelpdesk
CVE-2021-35211

Serv-U Remote Memory Escape Vulnerability

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

CVSS 3.1 · 9 Critical EPSS 91.2% KEV · Listed
Vendors
Solarwinds
Products
Serv-u
CVE-2021-35247

Improper Input Validation Vulnerability in Serv-U

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.

CVSS 3.1 · 4.3 Medium EPSS 3.6% KEV · Listed
Vendors
Solarwinds
Products
Serv-u
CVE-2020-10148

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

CVSS 3.1 · 9.8 Critical EPSS 92.0% KEV · Listed
Vendors
Solarwinds
Products
Orion Platform
CVE-2023-33225

SolarWinds Platform Deserialization of Untrusted Data Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

CVSS 3.1 · 7.2 High EPSS 3.2% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-50395

SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited

CVSS 3.1 · 8 High EPSS 1.6% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform