Vulnerabilities > Solarwinds > N Central > 12.3.0.670

DATE CVE VULNERABILITY TITLE RISK
2020-12-16 CVE-2020-25622 Cross-Site Request Forgery (CSRF) vulnerability in Solarwinds N-Central 12.3.0.670
An issue was discovered in SolarWinds N-Central 12.3.0.670.
network
low complexity
solarwinds CWE-352
8.8
2020-12-16 CVE-2020-25621 Missing Authentication for Critical Function vulnerability in Solarwinds N-Central 12.3.0.670
An issue was discovered in SolarWinds N-Central 12.3.0.670.
local
low complexity
solarwinds CWE-306
8.4
2020-12-16 CVE-2020-25620 Use of Hard-coded Credentials vulnerability in Solarwinds N-Central 12.3.0.670
An issue was discovered in SolarWinds N-Central 12.3.0.670.
local
low complexity
solarwinds CWE-798
7.8
2020-12-16 CVE-2020-25619 Unspecified vulnerability in Solarwinds N-Central 12.3.0.670
An issue was discovered in SolarWinds N-Central 12.3.0.670.
local
low complexity
solarwinds
4.4
2020-12-16 CVE-2020-25618 OS Command Injection vulnerability in Solarwinds N-Central 12.3.0.670
An issue was discovered in SolarWinds N-Central 12.3.0.670.
network
low complexity
solarwinds CWE-78
8.8
2020-12-16 CVE-2020-25617 Path Traversal vulnerability in Solarwinds N-Central 12.3.0.670
An issue was discovered in SolarWinds N-Central 12.3.0.670.
network
low complexity
solarwinds CWE-22
8.8
2020-10-19 CVE-2020-15909 Session Fixation vulnerability in Solarwinds N-Central
SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access.
network
low complexity
solarwinds CWE-384
8.8