Read the docs

SolarWinds

Records350All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical82CVSS 9.0–10.0
CVSS high139CVSS 7.0–8.9

Exploited now

SolarWinds records in CISA KEV
TI-2026-22619 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability Priority CRITICAL 90KEV 2026-06-05TI-2025-19358 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-03-09TI-2025-27034 SolarWinds Web Help Desk Security Control Bypass Vulnerability Priority CRITICAL 100KEV 2026-02-12TI-2025-27044 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-02-03TI-2024-19176 SolarWinds Web Help Desk Hardcoded Credential Vulnerability Priority CRITICAL 98KEV 2024-10-15TI-2024-19175 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2024-08-15

Components

Products in the NVD configurations · select one to filter the records
Serv-u 55 records CRITICAL Orion Platform 49 records CRITICAL Access Rights Manager 32 records HIGH Solarwinds Platform 27 records MEDIUM Web Help Desk 22 records CRITICAL Serv-u File Server 20 records HIGH Serv-u Ftp Server 11 records HIGH Database Performance Analyzer 10 records MEDIUM

Records

27 records in Solarwinds Platform · all components

TI-2024-19185 CVE-2024-28999 · GHSA-v7rg-6cx2-mgr8

SolarWinds Platform Race Condition Vulnerability

Priority MEDIUM 48

The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.13913 Published 2024-06-04 No fix listed CWE-362
TI-2023-27572 CVE-2023-50395 · GHSA-gqfw-9432-p6cq

SQL injection remote code execution in SolarWinds Platform

Priority MEDIUM 40

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01578 Published 2024-02-06 No fix listed CWE-89
TI-2023-17633 CVE-2023-35188 · GHSA-v63h-fjp2-v8q9

SQL injection remote code execution in SolarWinds Platform

Priority MEDIUM 40

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01536 Published 2024-02-06 No fix listed CWE-89
TI-2024-19186 CVE-2024-29000 · GHSA-35hc-25v2-p75r

SolarWinds Platform Reflected XSS Vulnerability

Priority LOW 37

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console.

CVSS 3.1HIGH 7.9 Adjacent network High privileges User interaction EPSS 0.00463 Published 2024-05-20 No fix listed CWE-79
TI-2024-19184 CVE-2024-28996 · GHSA-jgwr-47p2-7rr2

SolarWinds Platform SWQL Injection Vulnerability

Priority LOW 35

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00349 Published 2024-06-04 No fix listed CWE-89
TI-2024-19188 CVE-2024-29003 · GHSA-5fvw-q4g6-wqf7

SolarWinds Platform Cross Site Scripting Vulnerability

Priority LOW 34

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface.

CVSS 3.1HIGH 7.5 Adjacent network Low privileges User interaction EPSS 0.00696 Published 2024-04-18 No fix listed CWE-79
TI-2024-19187 CVE-2024-29001 · GHSA-89jm-c34p-prg4

SolarWinds Platform SWQL Injection Vulnerability

Priority LOW 34

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface.

CVSS 3.1HIGH 7.5 Adjacent network Low privileges User interaction EPSS 0.0059 Published 2024-04-18 No fix listed CWE-89
TI-2024-30698 CVE-2024-45717 · GHSA-p53x-qm8g-2xm3

SolarWinds Platform Cross- Site Scripting Vulnerability

Priority LOW 33

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface.

CVSS 3.1HIGH 7.0 Adjacent network Low privileges User interaction EPSS 0.00375 Published 2024-12-04 No fix listed CWE-79
TI-2024-30697 CVE-2024-45715 · GHSA-f3pf-cwmm-48gv

SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability

Priority LOW 31

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.

CVSS 3.1HIGH 7.1 Adjacent network High privileges User interaction EPSS 0.00343 Published 2024-10-16 No fix listed CWE-79
TI-2024-19189 CVE-2024-29004 · GHSA-5975-6qpm-2744

SolarWinds Platform Stored XSS Vulnerability

Priority LOW 31

The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console.

CVSS 3.1HIGH 7.1 Adjacent network High privileges User interaction EPSS 0.0032 Published 2024-06-04 No fix listed CWE-79
TI-2022-17170 CVE-2022-36965 · GHSA-2p9x-6v53-f7f4

Stored and DOM XSS in QoE Applications: Orion Platform

Priority LOW 29

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00762 Published 2022-09-30 Fixed in 2022.3.0 CWE-79
TI-2023-03381 CVE-2023-3622 · GHSA-59r2-w2xq-gp88

Improper authentication in SolarWinds Platform

Priority LOW 21

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00751 Published 2023-07-26 No fix listed CWE-287
Load more
Open these records in search →