Solarwinds: Security Vulnerabilities
SQL Injection Remote Code Vulnerability was found in the SolarWinds
Platform. This vulnerability can be exploited with a low privileged account.
CVSS Score
8.0
EPSS Score
0.001
Published
2023-11-28
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33227
CVSS Score
8.0
EPSS Score
0.036
Published
2023-11-09
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33226
CVSS Score
8.0
EPSS Score
0.014
Published
2023-11-09
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.
CVSS Score
8.0
EPSS Score
0.036
Published
2023-11-01
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.
CVSS Score
8.0
EPSS Score
0.036
Published
2023-11-01
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
CVSS Score
4.5
EPSS Score
0.0
Published
2023-11-01
Insecure
job execution mechanism vulnerability. This
vulnerability can lead to other attacks as a result.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-11-01
SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.
CVSS Score
8.0
EPSS Score
0.024
Published
2023-11-01
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.
CVSS Score
8.8
EPSS Score
0.046
Published
2023-10-19
The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users to abuse local resources to Privilege Escalation.
CVSS Score
7.8
EPSS Score
0.001
Published
2023-10-19