Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-31	CVE-2021-35212	SQL Injection vulnerability in Solarwinds Orion Platform An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. network low complexity solarwinds CWE-89 critical	9.0
2021-02-10	CVE-2020-27871	Path Traversal vulnerability in Solarwinds Orion Platform 2020.2.1 This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. network low complexity solarwinds CWE-22 critical	9.0
2021-02-03	CVE-2021-25274	Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. network low complexity solarwinds CWE-502 critical	10.0
2020-12-29	CVE-2020-10148	Improper Authentication vulnerability in Solarwinds Orion Platform 2019.4/2020.2/2020.2.1 The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. network low complexity solarwinds CWE-287 critical	9.8