Vulnerabilities > Solarwinds > Solarwinds Platform
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-16 | CVE-2024-45710 | Uncontrolled Search Path Element vulnerability in Solarwinds Platform SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. | 7.8 |
| 2024-10-16 | CVE-2024-45715 | Cross-site Scripting vulnerability in Solarwinds Platform The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements. | 6.1 |
| 2024-06-04 | CVE-2024-28996 | SQL Injection vulnerability in Solarwinds Platform The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. | 8.1 |
| 2024-06-04 | CVE-2024-28999 | Race Condition vulnerability in Solarwinds Platform The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. | 8.1 |
| 2024-06-04 | CVE-2024-29004 | Cross-site Scripting vulnerability in Solarwinds Platform The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. | 4.8 |
| 2024-02-06 | CVE-2023-35188 | SQL Injection vulnerability in Solarwinds Platform SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. | 8.8 |
| 2024-02-06 | CVE-2023-50395 | SQL Injection vulnerability in Solarwinds Platform SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. | 8.8 |
| 2023-11-28 | CVE-2023-40056 | SQL Injection vulnerability in Solarwinds Platform SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. | 8.8 |
| 2023-11-01 | CVE-2023-40061 | Improper Input Validation vulnerability in Solarwinds Platform Insecure job execution mechanism vulnerability. | 8.8 |
| 2023-11-01 | CVE-2023-40062 | Improper Input Validation vulnerability in Solarwinds Platform SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. | 8.8 |