Vulnerabilities > Solarwinds

DATE CVE VULNERABILITY TITLE RISK
2024-07-17 CVE-2024-28993 Unspecified vulnerability in Solarwinds Access Rights Manager
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
network
low complexity
solarwinds
critical
9.4
2024-06-06 CVE-2024-28995 Unspecified vulnerability in Solarwinds Serv-U
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.
network
low complexity
solarwinds
7.5
2024-06-04 CVE-2024-28996 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability.
network
high complexity
solarwinds
8.1
2024-06-04 CVE-2024-28999 Race Condition vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.
network
high complexity
solarwinds CWE-362
8.1
2024-06-04 CVE-2024-29004 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console.
network
low complexity
solarwinds
4.8
2024-02-15 CVE-2024-23477 Path Traversal vulnerability in Solarwinds Access Rights Manager
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.
low complexity
solarwinds CWE-22
critical
9.6
2024-02-06 CVE-2023-35188 Unspecified vulnerability in Solarwinds Platform
SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform.
network
low complexity
solarwinds
8.8
2024-02-06 CVE-2023-50395 Unspecified vulnerability in Solarwinds Platform
SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform.
network
low complexity
solarwinds
8.8
2023-11-28 CVE-2023-40056 Unspecified vulnerability in Solarwinds Platform
SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform.
network
low complexity
solarwinds
8.8
2023-11-09 CVE-2023-40054 Unspecified vulnerability in Solarwinds Network Configuration Manager
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability.
network
low complexity
solarwinds
8.8