Vulnerabilities > Solarwinds > High

DATE CVE VULNERABILITY TITLE RISK
2023-02-15 CVE-2023-23836 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform 2022.4.1
SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data.
network
low complexity
solarwinds CWE-502
7.2
2023-01-20 CVE-2022-47012 Use of Uninitialized Resource vulnerability in Solarwinds Dynamips 0.2.21
Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.
network
low complexity
solarwinds CWE-908
7.5
2023-01-20 CVE-2022-38112 Cleartext Storage of Sensitive Information vulnerability in Solarwinds Database Performance Analyzer
In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext.
network
low complexity
solarwinds CWE-312
7.5
2022-12-16 CVE-2021-35252 Improper Authentication vulnerability in Solarwinds Serv-U
Common encryption key appears to be used across all deployed instances of Serv-U FTP Server.
network
low complexity
solarwinds CWE-287
7.5
2022-11-29 CVE-2022-36960 Improper Input Validation vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to Improper Input Validation.
network
low complexity
solarwinds CWE-20
8.8
2022-11-29 CVE-2022-36962 Command Injection vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to Command Injection.
network
low complexity
solarwinds CWE-77
7.2
2022-11-29 CVE-2022-36964 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data.
network
low complexity
solarwinds CWE-502
8.8
2022-10-20 CVE-2022-36957 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data.
network
low complexity
solarwinds CWE-502
7.2
2022-10-20 CVE-2022-36958 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data.
network
low complexity
solarwinds CWE-502
8.8
2022-10-20 CVE-2022-38108 Deserialization of Untrusted Data vulnerability in Solarwinds Orion Platform
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data.
network
low complexity
solarwinds CWE-502
7.2