Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

27 records

Vendor: SolarWinds Component: Solarwinds Platform Clear all filters
TI-2024-35264 CVE-2024-52611 · GHSA-q788-9r25-cm5m

SolarWinds Platform Information Disclosure Vulnerability

Priority LOW 17

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00353 Published 2025-02-11 No fix listed CWE-209
TI-2024-30698 CVE-2024-45717 · GHSA-p53x-qm8g-2xm3

SolarWinds Platform Cross- Site Scripting Vulnerability

Priority LOW 33

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface.

CVSS 3.1HIGH 7.0 Adjacent network Low privileges User interaction EPSS 0.00375 Published 2024-12-04 No fix listed CWE-79
TI-2024-30697 CVE-2024-45715 · GHSA-f3pf-cwmm-48gv

SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability

Priority LOW 31

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.

CVSS 3.1HIGH 7.1 Adjacent network High privileges User interaction EPSS 0.00343 Published 2024-10-16 No fix listed CWE-79
TI-2024-19189 CVE-2024-29004 · GHSA-5975-6qpm-2744

SolarWinds Platform Stored XSS Vulnerability

Priority LOW 31

The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console.

CVSS 3.1HIGH 7.1 Adjacent network High privileges User interaction EPSS 0.0032 Published 2024-06-04 No fix listed CWE-79
TI-2024-19185 CVE-2024-28999 · GHSA-v7rg-6cx2-mgr8

SolarWinds Platform Race Condition Vulnerability

Priority MEDIUM 48

The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.13913 Published 2024-06-04 No fix listed CWE-362
TI-2024-19184 CVE-2024-28996 · GHSA-jgwr-47p2-7rr2

SolarWinds Platform SWQL Injection Vulnerability

Priority LOW 35

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00349 Published 2024-06-04 No fix listed CWE-89
TI-2024-19186 CVE-2024-29000 · GHSA-35hc-25v2-p75r

SolarWinds Platform Reflected XSS Vulnerability

Priority LOW 37

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console.

CVSS 3.1HIGH 7.9 Adjacent network High privileges User interaction EPSS 0.00463 Published 2024-05-20 No fix listed CWE-79
TI-2024-19188 CVE-2024-29003 · GHSA-5fvw-q4g6-wqf7

SolarWinds Platform Cross Site Scripting Vulnerability

Priority LOW 34

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface.

CVSS 3.1HIGH 7.5 Adjacent network Low privileges User interaction EPSS 0.00696 Published 2024-04-18 No fix listed CWE-79
TI-2024-19187 CVE-2024-29001 · GHSA-89jm-c34p-prg4

SolarWinds Platform SWQL Injection Vulnerability

Priority LOW 34

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface.

CVSS 3.1HIGH 7.5 Adjacent network Low privileges User interaction EPSS 0.0059 Published 2024-04-18 No fix listed CWE-89
TI-2023-17633 CVE-2023-35188 · GHSA-v63h-fjp2-v8q9

SQL injection remote code execution in SolarWinds Platform

Priority MEDIUM 40

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01536 Published 2024-02-06 No fix listed CWE-89
TI-2023-27572 CVE-2023-50395 · GHSA-gqfw-9432-p6cq

SQL injection remote code execution in SolarWinds Platform

Priority MEDIUM 40

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01578 Published 2024-02-06 No fix listed CWE-89
TI-2023-03381 CVE-2023-3622 · GHSA-59r2-w2xq-gp88

Improper authentication in SolarWinds Platform

Priority LOW 21

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00751 Published 2023-07-26 No fix listed CWE-287
Load more