Advisories · Technology

SolarWinds Kiwi Syslog Server.

Every CVE that names SolarWinds Kiwi Syslog Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-35237 CVE record

CVSS 5.0 Medium

Clickjacking Vulnerability
- SolarWinds Kiwi Syslog Server
- CWE-1021
Not analysed yet 29 Oct 2021
CVE-2021-35236 CVE record

CVSS 3.1 Low

Missing Secure Flag From SSL Cookie
- SolarWinds Kiwi Syslog Server
- CWE-614
Not analysed yet 27 Oct 2021
CVE-2021-35235 CVE record

CVSS 5.3 Medium

ASP.NET Debug Feature Enabled
- SolarWinds Kiwi Syslog Server
- CWE-11
Not analysed yet 27 Oct 2021
CVE-2021-35233 CVE record

CVSS 5.3 Medium

HTTP TRACK & TRACE Methods Enabled
- SolarWinds Kiwi Syslog Server
- CWE-16
Not analysed yet 27 Oct 2021
CVE-2021-35231 CVE record

CVSS 6.7 Medium

Unquoted Path (SMB Login) Vulnerability
- SolarWinds Kiwi Syslog Server
- CWE-428
Not analysed yet 25 Oct 2021