Vulnerabilities > Solarwinds > Network Performance Monitor > High

DATE CVE VULNERABILITY TITLE RISK
2021-02-12 CVE-2020-27869 Unspecified vulnerability in Solarwinds Network Performance Monitor 2020/2020.2
This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2.
network
low complexity
solarwinds
8.8
2019-07-16 CVE-2018-13442 SQL Injection vulnerability in Solarwinds Network Performance Monitor
SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter.
network
low complexity
solarwinds CWE-89
8.8