Vendors / SolarWinds Records 350 All Threatist records
Exploited (KEV) 11 In CISA KEV
CVSS critical 82 CVSS 9.0–10.0
CVSS high 139 CVSS 7.0–8.9
Exploited now SolarWinds records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
An issue was discovered in SolarWinds N-Central 12.3.0.670.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03305 · Published 2020-12-16 · No fix listed CWE-22
Priority MEDIUM 43
An issue was discovered in SolarWinds N-Central 12.3.0.670.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0268 · Published 2020-12-16 · No fix listed CWE-78
Priority MEDIUM 42
SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02222 · Published 2020-10-19 · No fix listed CWE-384
Priority MEDIUM 40
An issue was discovered in SolarWinds N-Central 12.3.0.670.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00956 · Published 2020-12-16 · No fix listed CWE-352
Priority LOW 38
SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02475 · Published 2020-01-26 · No fix listed CWE-319
Priority LOW 37
An issue was discovered in SolarWinds N-Central 12.3.0.670.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.00543 · Published 2020-12-16 · No fix listed CWE-306
Priority LOW 34
An issue was discovered in SolarWinds N-Central 12.3.0.670.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0043 · Published 2020-12-16 · No fix listed CWE-798
Priority LOW 30
SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.05591 · Published 2020-10-19 · No fix listed CWE-732
Priority LOW 21
An issue was discovered in SolarWinds N-Central 12.3.0.670.
CVSS 3.1 MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2020-12-16 · No fix listed
Open these records in search → All records by CVSS severity
Critical82 High139 Medium127 Low2 No CVSS0