Read the docs

SolarWinds

Records350All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical82CVSS 9.0–10.0
CVSS high139CVSS 7.0–8.9

Exploited now

SolarWinds records in CISA KEV
TI-2026-22619 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability Priority CRITICAL 90KEV 2026-06-05TI-2025-19358 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-03-09TI-2025-27034 SolarWinds Web Help Desk Security Control Bypass Vulnerability Priority CRITICAL 100KEV 2026-02-12TI-2025-27044 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-02-03TI-2024-19176 SolarWinds Web Help Desk Hardcoded Credential Vulnerability Priority CRITICAL 98KEV 2024-10-15TI-2024-19175 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2024-08-15

Components

Products in the NVD configurations · select one to filter the records
Serv-u 55 records CRITICAL Orion Platform 49 records CRITICAL Access Rights Manager 32 records HIGH Solarwinds Platform 27 records MEDIUM Web Help Desk 22 records CRITICAL Serv-u File Server 20 records HIGH Serv-u Ftp Server 11 records HIGH Database Performance Analyzer 10 records MEDIUM

Records

9 records in Orion Network Performance Monitor · all components

TI-2014-07763 CVE-2014-9566 · GHSA-9cx9-3r2j-m5xx

Multiple SQL injection vulnerabilities in the Manage Accounts page in the…

Priority MEDIUM 63

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.46709 Published 2015-03-10 No fix listed CWE-89
TI-2012-02236 CVE-2012-2577 · GHSA-c2w8-wjm8-q9r4

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network…

Priority LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontac…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.1021 Published 2012-08-12 No fix listed CWE-79
TI-2012-04176 CVE-2012-4939 · GHSA-fcrw-2r23-93jj

Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web…

Priority LOW 30

Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07171 Published 2012-10-31 No fix listed CWE-79
TI-2010-04551 CVE-2010-4828 · GHSA-vmjv-mxvq-6g4x

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network…

Priority LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; Ne…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05073 Published 2011-08-24 No fix listed CWE-79
Open these records in search →