Vulnerabilities > Solarwinds > Orion Platform > 2019.4.2

DATE CVE VULNERABILITY TITLE RISK
2021-02-03 CVE-2021-25274 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform
The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues.
network
low complexity
solarwinds CWE-502
critical
 9.8
9.8
2020-09-17 CVE-2020-13169 Cross-site Scripting vulnerability in Solarwinds Orion Platform
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages.
network
low complexity
solarwinds CWE-79
critical
 9.0
9.0