Skip to content
OpenAdvisories

Vendor

SolarWinds

218 known vulnerabilities.

Products

SolarWinds Platform 41 Serv-U 34 Access Rights Manager 33 Orion Platform 24 Web Help Desk 19 SolarWinds Observability Self-Hosted 10 Network Configuration Manager 7 Kiwi Syslog Server 5 Database Performance Analyzer 4 Patch Manager 4 Observability Self-Hosted 4 SolarWinds SEM 3 Dameware 3 Database Performance Analyzer (DPA) 2 Kiwi CatTools 2 SolarWinds 2 ServU 2 Network Performance Monitor 2 SolarWinds Serv-U 1 Orion Job Scheduler 1 Dameware Mini Remote Control Service 1 Serv-U File Server 1 SQL Sentry 1 Kiwi Syslog NG 1 Service Desk 1 Orion Virtual Infrastructure Monitor 1 DPA 1 Hybrid Cloud Observability (HCO)/ SolarWinds Platform 1 Serv-U FTP Server 1 Server & Application Monitor (SAM) 1 Pingdom 1 Orion 1 Security Event Manager 1 Engineer's Toolset 1 Database Performance Monitor 1 Serv-U Managed File Transfer Server and Serv-U Secured FTP 1 NPM 1 Serv-U Server 1 Orion Core 1 WebHelpDesk 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-28326 Public exploit

    SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability

    SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.

    SolarWinds Access Rights Manager
  • High 7.5
    CVE-2026-28318 Exploited Public exploit EPSS 48%

    SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

    SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are u…

    SolarWinds Serv-U
    KEV Jun 5, 2026
  • High 8.1
    CVE-2025-40536 Exploited Public exploit Scanner template EPSS 74%

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.

    SolarWinds Web Help Desk
    KEV Feb 12, 2026
  • High 8.6
    CVE-2024-28995 Exploited Public exploit Scanner template EPSS 100%

    SolarWinds Serv-U L Directory Transversal Vulnerability

    SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

    SolarWinds SolarWinds Serv-U
    KEV Jul 17, 2024
  • High 8.8
    CVE-2024-0692 Public exploit Scanner template EPSS 92%

    SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

    The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

    SolarWinds Security Event Manager
  • High 7.2
    CVE-2022-38108 Public exploit EPSS 67%

    SolarWinds Platform Deserialization of Untrusted Data

    SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

    SolarWinds SolarWinds Platform Orion Platform
  • High 7.5
    CVE-2021-35250 Public exploit Scanner template EPSS 13%

    Directory Transversal Vulnerability in Serv-U 15.3

    A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1.

    SolarWinds Serv-U
  • High 8.9
    CVE-2021-35215 Public exploit EPSS 70%

    ActionPluginBaseView Deserialization of Untrusted Data RCE

    Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

    SolarWinds Orion Platform