Advisories · Technology

SolarWinds Platform.

Every CVE that names SolarWinds Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-52611 CVE record

CVSS 3.5 Low

SolarWinds Platform Information Disclosure Vulnerability
- SolarWinds Platform
- Information disclosure
Not analysed yet 11 Feb 2025
CVE-2024-52612 CVE record

CVSS 6.8 Medium

SolarWinds Platform Reflected Cross-Site Scripting Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 11 Feb 2025
CVE-2024-45717 CVE record

CVSS 7.0 High

SolarWinds Platform Cross- Site Scripting Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 4 Dec 2024
CVE-2024-45715 CVE record

CVSS 7.1 High

SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2024
CVE-2024-45710 CVE record

CVSS 7.8 High

SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- SolarWinds Platform
- CWE-427
Not analysed yet 16 Oct 2024
CVE-2024-29004 CVE record

CVSS 7.1 High

SolarWinds Platform Stored XSS Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 4 Jun 2024
CVE-2024-28999 CVE record

CVSS 6.4 Medium

SolarWinds Platform Race Condition Vulnerability
- SolarWinds Platform
- Race condition
Not analysed yet 4 Jun 2024
CVE-2024-28996 CVE record

CVSS 7.5 High

SolarWinds Platform SWQL Injection Vulnerability
- SolarWinds Platform
- SQL injection
Not analysed yet 4 Jun 2024
CVE-2024-29000 CVE record

CVSS 7.9 High

SolarWinds Platform Reflected XSS Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 20 May 2024
CVE-2024-29003 CVE record

CVSS 7.5 High

SolarWinds Platform Cross Site Scripting Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 18 Apr 2024
CVE-2024-29001 CVE record

CVSS 7.5 High

SolarWinds Platform SWQL Injection Vulnerability
- SolarWinds Platform
- SQL injection
Not analysed yet 18 Apr 2024
CVE-2024-28076 CVE record

CVSS 7.0 High

SolarWinds Platform Arbitrary Open Redirection Vulnerability
- SolarWinds Platform
- Open redirect
Not analysed yet 18 Apr 2024
CVE-2023-35188 CVE record

CVSS 8.0 High

SQL Injection Remote Code Execution Vulnerability
- SolarWinds Platform
- SQL injection
Not analysed yet 6 Feb 2024
CVE-2023-50395 CVE record

CVSS 8.0 High

SQL Injection Remote Code Execution Vulnerability
- SolarWinds Platform
- SQL injection
Not analysed yet 6 Feb 2024
CVE-2023-40056 CVE record

CVSS 8.0 High

SolarWinds Platform SQL Injection Remote Code Execution Vulnerability
- SolarWinds Platform
- SQL injection
Not analysed yet 28 Nov 2023
CVE-2023-40061 CVE record

CVSS 8.8 High

Insecure Job Execution Mechanism Vulnerability
- SolarWinds Platform
- CWE-20
Not analysed yet 1 Nov 2023
CVE-2023-40062 CVE record

CVSS 8.0 High

Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability
- SolarWinds Platform
- CWE-20
Not analysed yet 1 Nov 2023
CVE-2023-23845 CVE record

CVSS 6.8 Medium

SolarWinds Platform Exposed Dangerous Method Vulnerability
- SolarWinds Platform
- CWE-697
Not analysed yet 13 Sept 2023
CVE-2023-23840 CVE record

CVSS 6.8 Medium

SolarWinds Platform Exposed Dangerous Method Vulnerability
- SolarWinds Platform
- CWE-697
Not analysed yet 13 Sept 2023
CVE-2023-3622 CVE record

CVSS 4.3 Medium

Access Control Bypass Vulnerability in the SolarWinds Platform
- SolarWinds Platform
- Authentication bypass
Not analysed yet 26 Jul 2023
CVE-2023-33229 CVE record

CVSS 3.5 Low

SolarWinds Platform Incorrect Input Neutralization Vulnerability
- SolarWinds Platform
- Code injection
Not analysed yet 26 Jul 2023
CVE-2023-23843 CVE record

CVSS 7.2 High

SolarWinds Platform Incorrect Comparison Vulnerability
- SolarWinds Platform
- CWE-697
Not analysed yet 26 Jul 2023
CVE-2023-33224 CVE record

CVSS 7.2 High

SolarWinds Platform Incorrect Behavior Order Vulnerability
- SolarWinds Platform
- CWE-696
Not analysed yet 26 Jul 2023
CVE-2023-33225 CVE record

CVSS 7.2 High

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- CWE-697
Not analysed yet 26 Jul 2023
CVE-2023-23844 CVE record

CVSS 7.2 High

SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
- SolarWinds Platform
- CWE-184
Not analysed yet 26 Jul 2023
CVE-2023-23839 CVE record

CVSS 6.5 Medium

SolarWinds Platform Exposure of Sensitive Information Vulnerability
- SolarWinds Platform
- Information disclosure
Not analysed yet 25 Apr 2023
CVE-2022-47509 CVE record

CVSS 6.1 Medium

SolarWinds Platform Incorrect Input Neutralization Vulnerability
- SolarWinds Platform
- Cross-site scripting (XSS)
Not analysed yet 21 Apr 2023
CVE-2022-47505 CVE record

CVSS 7.8 High

SolarWinds Platform Local Privilege Escalation Vulnerability
- SolarWinds Platform
- Privilege escalation
Not analysed yet 21 Apr 2023
CVE-2022-36963 CVE record

CVSS 7.2 High

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- Code injection
Not analysed yet 21 Apr 2023
CVE-2023-23836 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- Insecure deserialization
Not analysed yet 15 Feb 2023
CVE-2022-47507 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- Insecure deserialization
Not analysed yet 15 Feb 2023
CVE-2022-47506 CVE record

CVSS 7.8 High

SolarWinds Platform Directory Traversal Vulnerability
- SolarWinds Platform
- Path traversal
Not analysed yet 15 Feb 2023
CVE-2022-47504 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- Insecure deserialization
Not analysed yet 15 Feb 2023
CVE-2022-47503 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- Insecure deserialization
Not analysed yet 15 Feb 2023
CVE-2022-38111 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- SolarWinds Platform
- Insecure deserialization
Not analysed yet 15 Feb 2023
CVE-2022-36964 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data
- SolarWinds Platform
- SolarWinds Orion Platform
- Insecure deserialization
Not analysed yet 29 Nov 2022
CVE-2022-36962 CVE record

CVSS 7.2 High

SolarWinds Platform Command Injection
- SolarWinds Platform
- SolarWinds Orion Platform
- Command injection
Not analysed yet 29 Nov 2022
CVE-2022-36960 CVE record

CVSS 8.8 High

SolarWinds Platform Improper Input Validation
- SolarWinds Platform
- SolarWinds Orion Platform
- Authentication bypass
- CWE-20
Not analysed yet 29 Nov 2022
CVE-2022-38108 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data
- SolarWinds Platform
- SolarWinds Orion Platform
- Insecure deserialization
Not analysed yet 20 Oct 2022
CVE-2022-36958 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data
- SolarWinds Platform
- SolarWinds Orion Platform
- Insecure deserialization
Not analysed yet 20 Oct 2022
CVE-2022-36957 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SolarWinds Platform Deserialization of Untrusted Data
- SolarWinds Platform
- SolarWinds Orion Platform
- Insecure deserialization
Not analysed yet 20 Oct 2022
CVE-2022-36966 CVE record

CVSS 5.4 Medium

Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
- SolarWinds Platform
- Broken access control
Not analysed yet 20 Oct 2022