Vulnerabilities > Solarwinds > Solarwinds Platform

DATE CVE VULNERABILITY TITLE RISK
2024-12-04 CVE-2024-45717 Cross-site Scripting vulnerability in Solarwinds Platform
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface.
low complexity
solarwinds CWE-79
4.8
2024-10-16 CVE-2024-45710 Uncontrolled Search Path Element vulnerability in Solarwinds Platform
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability.
local
low complexity
solarwinds CWE-427
7.8
2024-10-16 CVE-2024-45715 Cross-site Scripting vulnerability in Solarwinds Platform
The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.
network
low complexity
solarwinds CWE-79
6.1
2024-06-04 CVE-2024-28996 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability.
network
high complexity
solarwinds
8.1
2024-06-04 CVE-2024-28999 Race Condition vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.
network
high complexity
solarwinds CWE-362
8.1
2024-06-04 CVE-2024-29004 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console.
network
low complexity
solarwinds
4.8
2024-05-20 CVE-2024-29000 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console.
network
low complexity
solarwinds
4.8
2024-04-18 CVE-2024-29003 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface.
network
low complexity
solarwinds
5.4
2024-04-18 CVE-2024-28076 Unspecified vulnerability in Solarwinds Platform
The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability.
network
low complexity
solarwinds
4.7
2024-04-18 CVE-2024-29001 Unspecified vulnerability in Solarwinds Platform
A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface.
network
low complexity
solarwinds
8.0