Read the docs

SolarWinds

Records350All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical82CVSS 9.0–10.0
CVSS high139CVSS 7.0–8.9

Exploited now

SolarWinds records in CISA KEV
TI-2026-22619 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability Priority CRITICAL 90KEV 2026-06-05TI-2025-19358 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-03-09TI-2025-27034 SolarWinds Web Help Desk Security Control Bypass Vulnerability Priority CRITICAL 100KEV 2026-02-12TI-2025-27044 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-02-03TI-2024-19176 SolarWinds Web Help Desk Hardcoded Credential Vulnerability Priority CRITICAL 98KEV 2024-10-15TI-2024-19175 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2024-08-15

Components

Products in the NVD configurations · select one to filter the records
Serv-u 55 records CRITICAL Orion Platform 49 records CRITICAL Access Rights Manager 32 records HIGH Solarwinds Platform 27 records MEDIUM Web Help Desk 22 records CRITICAL Serv-u File Server 20 records HIGH Serv-u Ftp Server 11 records HIGH Database Performance Analyzer 10 records MEDIUM

Records

8 records in Network Performance Monitor · all components

TI-2020-16937 CVE-2020-27869 · GHSA-f6fw-jv2q-2mh7

SQL injection in SolarWinds Network Performance Monitor

Priority MEDIUM 46

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05334 Published 2021-02-11 No fix listed CWE-89
TI-2021-14118 CVE-2021-35225 · GHSA-25w6-fx24-w953

Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5

Priority LOW 30

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00844 Published 2021-10-21 Fixed in 2020.2.6 Hotfix 2
TI-2017-06944 CVE-2017-9538 · GHSA-hwf6-mrmq-vv3x

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor…

Priority LOW 27

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service (permanent display of a "Cannot exit above the top direct…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02432 Published 2017-10-02 No fix listed CWE-20
TI-2017-06943 CVE-2017-9537 · GHSA-wrp6-hppf-h4vm

Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network…

Priority LOW 27

Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02822 Published 2017-10-02 No fix listed CWE-79
TI-2019-09633 CVE-2019-12864 · GHSA-gqf4-w7p4-pm73

SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to…

Priority LOW 25

SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Interna…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00466 Published 2020-05-04 No fix listed CWE-209
Open these records in search →