Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SolarWinds SEM 2022.4 Clear all filters
TI-2022-17822 CVE-2022-38115 · GHSA-4528-vmxj-v97w

Insecure Methods Vulnerability

Priority LOW 31

Insecure method vulnerability in which allowed HTTP methods are disclosed.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00724 Published 2022-11-23 Fixed in 2022.4 CWE-650
TI-2022-17821 CVE-2022-38114 · GHSA-p6xj-9vgw-4xp9

Client-Side Desync Vulnerability

Priority LOW 28

This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00568 Published 2022-11-23 Fixed in 2022.4 CWE-444
TI-2022-17820 CVE-2022-38113 · GHSA-74m3-68jj-9vp9

Information disclosure in SolarWinds SEM

Priority LOW 25

This vulnerability discloses build and services versions in the server response header.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00724 Published 2022-11-23 Fixed in 2022.4 CWE-200