What’s Vulnerable › Products

SolarWinds Orion Platform vulnerabilities

49 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your SolarWinds Orion Platform version is affected

Exploited SolarWinds Orion Platform vulnerabilities

• CVE-2020-10148 — SolarWinds Orion Authentication Bypass Vulnerability

Latest SolarWinds Orion Platform vulnerabilities

• CVE-2023-23845 — SolarWinds Platform Exposed Dangerous Method Vulnerability (CVSS 7.2)
• CVE-2023-23840 — SolarWinds Platform Exposed Dangerous Method Vulnerability (CVSS 7.2)
• CVE-2022-47509 — SolarWinds Platform Incorrect Input Neutralization Vulnerability (CVSS 6.1)
• CVE-2022-47505 — SolarWinds Platform Local Privilege Escalation Vulnerability (CVSS 7.8)
• CVE-2022-36963 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
• CVE-2023-23836 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
• CVE-2022-47507 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
• CVE-2022-47506 — SolarWinds Platform Directory Traversal Vulnerability (CVSS 7.8)
• CVE-2022-47504 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
• CVE-2022-47503 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
• CVE-2022-38111 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
• CVE-2022-36964 — SolarWinds Platform Deserialization of Untrusted Data (CVSS 8.8)
• CVE-2022-36962 — SolarWinds Platform Command Injection (CVSS 7.2)
• CVE-2022-36960 — SolarWinds Platform Improper Input Validation (CVSS 8.8)
• CVE-2022-38108 — SolarWinds Platform Deserialization of Untrusted Data (CVSS 7.2)
• CVE-2022-36966 — Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6 (CVSS 5.4)
• CVE-2022-36958 — SolarWinds Platform Deserialization of Untrusted Data (CVSS 8.8)
• CVE-2022-36957 — SolarWinds Platform Deserialization of Untrusted Data (CVSS 7.2)
• CVE-2022-36961 — Orion Platform SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
• CVE-2021-35248 — Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users (CVSS 4.3)
• CVE-2021-35244 — Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6 (CVSS 7.2)
• CVE-2021-35234 — Exposed Dangerous Functions - Privileged Escalation (CVSS 8.8)
• CVE-2021-35218 — Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2021-35215 — ActionPluginBaseView Deserialization of Untrusted Data RCE (CVSS 8.8)
• CVE-2021-35238 — Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability (CVSS 4.8)