Vulnerabilities > Solarwinds > Orion Platform > High

DATE CVE VULNERABILITY TITLE RISK
2021-08-31 CVE-2021-35221 Unspecified vulnerability in Solarwinds Orion Platform
Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.
network
low complexity
solarwinds
8.1
2021-04-22 CVE-2021-27277 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform 2020.2
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2.
local
low complexity
solarwinds CWE-502
7.2
2021-04-14 CVE-2021-27258 Unspecified vulnerability in Solarwinds Orion Platform 2020.2
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2.
network
low complexity
solarwinds
7.5
2019-03-01 CVE-2019-9546 Uncontrolled Search Path Element vulnerability in Solarwinds Orion Platform
SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.
network
low complexity
solarwinds CWE-427
7.5