agentprime: solarwinds-orion-platformEvery new CVE for solarwinds-orion-platform.https://agentprime.io/CVE-2022-36964: SolarWinds Platform Deserialization of Untrusted Datahttps://agentprime.io/advisories/CVE-2022-36964/https://agentprime.io/advisories/CVE-2022-36964/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.18 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Nov 2022 20:47:49 GMTCVEcriticalCVE-2022-36962: SolarWinds Platform Command Injectionhttps://agentprime.io/advisories/CVE-2022-36962/https://agentprime.io/advisories/CVE-2022-36962/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Nov 2022 20:46:18 GMTCVECVE-2022-36960: SolarWinds Platform Improper Input Validationhttps://agentprime.io/advisories/CVE-2022-36960/https://agentprime.io/advisories/CVE-2022-36960/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Nov 2022 20:43:38 GMTCVECVE-2022-38108: SolarWinds Platform Deserialization of Untrusted Datahttps://agentprime.io/advisories/CVE-2022-38108/https://agentprime.io/advisories/CVE-2022-38108/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.67 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Oct 2022 20:11:25 GMTCVEcriticalCVE-2022-36958: SolarWinds Platform Deserialization of Untrusted Datahttps://agentprime.io/advisories/CVE-2022-36958/https://agentprime.io/advisories/CVE-2022-36958/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.82 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Oct 2022 20:10:01 GMTCVEcriticalCVE-2022-36957: SolarWinds Platform Deserialization of Untrusted Datahttps://agentprime.io/advisories/CVE-2022-36957/https://agentprime.io/advisories/CVE-2022-36957/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Oct 2022 20:08:04 GMTCVEcriticalCVE-2022-36965: Stored and DOM XSS in QoE Applications: Orion Platformhttps://agentprime.io/advisories/CVE-2022-36965/https://agentprime.io/advisories/CVE-2022-36965/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Sep 2022 16:45:24 GMTCVECVE-2022-36961: Orion Platform SQL Injection Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2022-36961/https://agentprime.io/advisories/CVE-2022-36961/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.74 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Sep 2022 16:06:10 GMTCVEcriticalCVE-2021-35244: Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6https://agentprime.io/advisories/CVE-2021-35244/https://agentprime.io/advisories/CVE-2021-35244/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Dec 2021 20:08:24 GMTCVECVE-2021-35217: Insecure Deserialization of untrusted data causing Remote code execution vulnerability.https://agentprime.io/advisories/CVE-2021-35217/https://agentprime.io/advisories/CVE-2021-35217/CVSS 8.9 (High). Critical: CVSS score 8.9 (7.0 or more) and EPSS 0.73 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Sep 2021 13:15:03 GMTCVEcriticalCVE-2021-35215: ActionPluginBaseView Deserialization of Untrusted Data RCEhttps://agentprime.io/advisories/CVE-2021-35215/https://agentprime.io/advisories/CVE-2021-35215/CVSS 8.9 (High). Critical: CVSS score 8.9 (7.0 or more) and EPSS 0.70 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Sep 2021 14:21:46 GMTCVEcriticalCVE-2021-35238: Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35238/https://agentprime.io/advisories/CVE-2021-35238/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Sep 2021 11:02:35 GMTCVECVE-2021-35212: Blind SQL injection Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35212/https://agentprime.io/advisories/CVE-2021-35212/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 17:00:15 GMTCVECVE-2021-35213: Orion User setting Improper Access Control Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35213/https://agentprime.io/advisories/CVE-2021-35213/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 15:58:48 GMTCVECVE-2021-35240: Stored XSS via Help Server settingshttps://agentprime.io/advisories/CVE-2021-35240/https://agentprime.io/advisories/CVE-2021-35240/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 15:57:21 GMTCVECVE-2021-35239: Stored XSS in Maps text box hyperlink Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35239/https://agentprime.io/advisories/CVE-2021-35239/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 15:56:08 GMTCVECVE-2021-35222: Resource.aspx Reflected Cross-Site Scripting Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35222/https://agentprime.io/advisories/CVE-2021-35222/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 12:14:34 GMTCVECVE-2021-35221: ImportAlert Improper Access Control Tampering Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35221/https://agentprime.io/advisories/CVE-2021-35221/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 12:13:04 GMTCVECVE-2021-35220: EmailWebPage Command Injection RCEhttps://agentprime.io/advisories/CVE-2021-35220/https://agentprime.io/advisories/CVE-2021-35220/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 11:03:45 GMTCVECVE-2021-35219: ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2021-35219/https://agentprime.io/advisories/CVE-2021-35219/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Aug 2021 11:01:50 GMTCVECVE-2021-27258: Improper access control in SolarWinds Orion Platformhttps://agentprime.io/advisories/CVE-2021-27258/https://agentprime.io/advisories/CVE-2021-27258/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Apr 2021 15:45:58 GMTCVEcriticalCVE-2020-27871: Path traversal in SolarWinds Orion Platformhttps://agentprime.io/advisories/CVE-2020-27871/https://agentprime.io/advisories/CVE-2020-27871/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.91 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Feb 2021 22:15:16 GMTCVEcriticalCVE-2020-27870: Path traversal in SolarWinds Orion Platformhttps://agentprime.io/advisories/CVE-2020-27870/https://agentprime.io/advisories/CVE-2020-27870/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Feb 2021 22:15:15 GMTCVECVE-2020-10148: SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commandshttps://agentprime.io/advisories/CVE-2020-10148/https://agentprime.io/advisories/CVE-2020-10148/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.92 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Dec 2020 21:55:16 GMTCVEcriticalKEV