Skip to content
OpenAdvisories

Vendor

SolarWinds

218 known vulnerabilities.

Products

SolarWinds Platform 41 Serv-U 34 Access Rights Manager 33 Orion Platform 24 Web Help Desk 19 SolarWinds Observability Self-Hosted 10 Network Configuration Manager 7 Kiwi Syslog Server 5 Database Performance Analyzer 4 Patch Manager 4 Observability Self-Hosted 4 SolarWinds SEM 3 Dameware 3 Database Performance Analyzer (DPA) 2 Kiwi CatTools 2 SolarWinds 2 ServU 2 Network Performance Monitor 2 SolarWinds Serv-U 1 Orion Job Scheduler 1 Dameware Mini Remote Control Service 1 Serv-U File Server 1 SQL Sentry 1 Kiwi Syslog NG 1 Service Desk 1 Orion Virtual Infrastructure Monitor 1 DPA 1 Hybrid Cloud Observability (HCO)/ SolarWinds Platform 1 Serv-U FTP Server 1 Server & Application Monitor (SAM) 1 Pingdom 1 Orion 1 Security Event Manager 1 Engineer's Toolset 1 Database Performance Monitor 1 Serv-U Managed File Transfer Server and Serv-U Secured FTP 1 NPM 1 Serv-U Server 1 Orion Core 1 WebHelpDesk 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.6
    CVE-2024-45712 Public exploit

    SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

    SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.

    SolarWinds Serv-U
  • Low 3.5
    CVE-2024-52611

    SolarWinds Platform Information Disclosure Vulnerability

    The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.

    SolarWinds SolarWinds Platform
  • Low 3.5
    CVE-2024-52606

    SolarWinds Platform Server-Side Request Forgery Vulnerability

    SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request.

    SolarWinds SolarWinds
  • Low 3.5
    CVE-2023-33229

    SolarWinds Platform Incorrect Input Neutralization Vulnerability

    The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML.

    SolarWinds SolarWinds Platform
  • Low 3.1
    CVE-2021-35236

    Missing Secure Flag From SSL Cookie

    The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to only send the cookie if the request is being sent over a secure channel such as HTTPS. This will help protect the cookie …

    SolarWinds Kiwi Syslog Server