Skip to content
OpenAdvisories

Product · SolarWinds

Orion Platform

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2022-38108 Public exploit EPSS 67%

    SolarWinds Platform Deserialization of Untrusted Data

    SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

    SolarWinds SolarWinds Platform Orion Platform
  • High 8.9
    CVE-2021-35215 Public exploit EPSS 70%

    ActionPluginBaseView Deserialization of Untrusted Data RCE

    Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

    SolarWinds Orion Platform