Vulnerabilities > Solarwinds
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-19 | CVE-2023-35187 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. | 9.8 |
| 2023-09-13 | CVE-2023-23840 | Unspecified vulnerability in Solarwinds Orion Platform The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. | 7.2 |
| 2023-09-13 | CVE-2023-23845 | Unspecified vulnerability in Solarwinds Orion Platform The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. | 7.2 |
| 2023-07-26 | CVE-2023-23843 | Incorrect Comparison vulnerability in Solarwinds Platform The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. | 7.2 |
| 2023-07-26 | CVE-2023-23844 | Incorrect Comparison vulnerability in Solarwinds Platform The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. | 7.2 |
| 2023-07-26 | CVE-2023-33224 | Unspecified vulnerability in Solarwinds Platform The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. | 7.2 |
| 2023-07-18 | CVE-2023-33231 | Cross-site Scripting vulnerability in Solarwinds Database Performance Analyzer XSS attack was possible in DPA 2023.2 due to insufficient input validation | 6.1 |
| 2023-06-15 | CVE-2023-23841 | Cleartext Transmission of Sensitive Information vulnerability in Solarwinds Serv-U SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.? Part of the URL of the request discloses sensitive data. | 7.5 |
| 2023-04-25 | CVE-2023-23839 | Unspecified vulnerability in Solarwinds Platform The SolarWinds Platform was susceptible to the Exposure of Sensitive Information Vulnerability. | 6.5 |
| 2023-04-25 | CVE-2023-23837 | Improper Handling of Exceptional Conditions vulnerability in Solarwinds Database Performance Analyzer No exception handling vulnerability which revealed sensitive or excessive information to users. | 7.5 |