Vulnerabilities (CVE)

Filtered by vendor Solarwinds Subscribe
Filtered by product Solarwinds Platform
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23844 1 Solarwinds 1 Solarwinds Platform 2024-11-21 N/A 7.2 HIGH
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.
CVE-2023-23843 1 Solarwinds 1 Solarwinds Platform 2024-11-21 N/A 7.2 HIGH
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.
CVE-2023-23839 1 Solarwinds 1 Solarwinds Platform 2024-11-21 N/A 6.5 MEDIUM
The SolarWinds Platform was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users to access Orion.WebCommunityStrings SWIS schema object and obtain sensitive information.
CVE-2024-45715 1 Solarwinds 1 Solarwinds Platform 2024-10-30 N/A 6.1 MEDIUM
The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.
CVE-2024-45710 1 Solarwinds 1 Solarwinds Platform 2024-10-17 N/A 7.8 HIGH
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.