Skip to content
OpenAdvisories

Product · SolarWinds

Orion Platform

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-36965

    Stored and DOM XSS in QoE Applications: Orion Platform

    Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

    SolarWinds Orion Platform
  • Medium 6.8
    CVE-2021-35244

    Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6

    The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file uplo…

    SolarWinds Orion Platform
  • Medium 4.8
    CVE-2021-35238

    Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability

    User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.

    SolarWinds Orion Platform
  • Medium 6.5
    CVE-2021-35240

    Stored XSS via Help Server settings

    A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'.

    SolarWinds Orion Platform
  • Medium 6.3
    CVE-2021-35221

    ImportAlert Improper Access Control Tampering Vulnerability

    Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.

    SolarWinds Orion Platform
  • Medium 6.0
    CVE-2021-35219

    ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability

    ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.

    SolarWinds Orion Platform