SolarWinds Orion Platform

• CVE-2020-10148 Critical 9.8 Exploited SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands 92.0%
• CVE-2022-36964 High 8.8 SolarWinds Platform Deserialization of Untrusted Data 17.8%
• CVE-2022-36962 High 7.2 SolarWinds Platform Command Injection 9.4%
• CVE-2022-36960 High 8.8 SolarWinds Platform Improper Input Validation 1.0%
• CVE-2022-38108 High 7.2 SolarWinds Platform Deserialization of Untrusted Data 66.6%
• CVE-2022-36958 High 8.8 SolarWinds Platform Deserialization of Untrusted Data 81.9%
• CVE-2022-36957 High 7.2 SolarWinds Platform Deserialization of Untrusted Data 15.0%
• CVE-2022-36965 Medium 6.1 Stored and DOM XSS in QoE Applications: Orion Platform 0.8%
• CVE-2022-36961 High 8.8 Orion Platform SQL Injection Privilege Escalation Vulnerability 74.3%
• CVE-2021-35244 Medium 6.8 Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6 6.0%
• CVE-2021-35217 High 8.9 Insecure Deserialization of untrusted data causing Remote code execution vulnerability. 72.8%
• CVE-2021-35215 High 8.9 ActionPluginBaseView Deserialization of Untrusted Data RCE 69.9%
• CVE-2021-35238 Medium 4.8 Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability 1.1%
• CVE-2021-35212 High 8.9 Blind SQL injection Vulnerability 1.6%
• CVE-2021-35213 High 8.9 Orion User setting Improper Access Control Privilege Escalation Vulnerability 3.4%
• CVE-2021-35240 Medium 6.5 Stored XSS via Help Server settings 1.1%
• CVE-2021-35239 High 7.5 Stored XSS in Maps text box hyperlink Vulnerability 1.0%
• CVE-2021-35222 High 8.0 Resource.aspx Reflected Cross-Site Scripting Vulnerability 2.6%
• CVE-2021-35221 Medium 6.3 ImportAlert Improper Access Control Tampering Vulnerability 2.0%
• CVE-2021-35220 High 8.1 EmailWebPage Command Injection RCE 2.5%
• CVE-2021-35219 Medium 6.0 ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability 0.8%
• CVE-2021-27258 Critical 9.8 This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. T 4.1%
• CVE-2020-27871 High 7.2 This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, 90.8%
• CVE-2020-27870 High 7.5 This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. 4.5%