High

DATE	CVE	VULNERABILITY TITLE	RISK
2017-03-24	CVE-2017-5199	Incorrect Permission Assignment for Critical Resource vulnerability in Solarwinds LOG and Event Manager The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl. network low complexity solarwinds CWE-732	8.8
2017-03-24	CVE-2017-5198	Unspecified vulnerability in Solarwinds LOG and Event Manager SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh. local low complexity solarwinds	8.8