What’s Vulnerable › Products
SolarWinds Platform vulnerabilities
27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your SolarWinds Platform version is affected
Latest SolarWinds Platform vulnerabilities
- CVE-2024-52612 — SolarWinds Platform Reflected Cross-Site Scripting Vulnerability (CVSS 4.8)
- CVE-2024-52611 — SolarWinds Platform Information Disclosure Vulnerability (CVSS 3.5)
- CVE-2024-52606 — SolarWinds Platform Server-Side Request Forgery Vulnerability (CVSS 9.8)
- CVE-2024-45717 — SolarWinds Platform Cross- Site Scripting Vulnerability (CVSS 4.8)
- CVE-2024-45715 — SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability (CVSS 5.2)
- CVE-2024-45710 — SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8)
- CVE-2024-29004 — SolarWinds Platform Stored XSS Vulnerability (CVSS 4.3)
- CVE-2024-28999 — SolarWinds Platform Race Condition Vulnerability (CVSS 7.5)
- CVE-2024-28996 — SolarWinds Platform SWQL Injection Vulnerability (CVSS 7.5)
- CVE-2024-29000 — SolarWinds Platform Reflected XSS Vulnerability (CVSS 4.3)
- CVE-2024-29003 — SolarWinds Platform Cross Site Scripting Vulnerability (CVSS 4.8)
- CVE-2024-29001 — SolarWinds Platform SWQL Injection Vulnerability (CVSS 7.4)
- CVE-2024-28076 — SolarWinds Platform Arbitrary Open Redirection Vulnerability (CVSS 3.8)
- CVE-2023-50395 — SQL Injection Remote Code Execution Vulnerability (CVSS 8.0)
- CVE-2023-35188 — SQL Injection Remote Code Execution Vulnerability (CVSS 8.0)
- CVE-2023-40056 — SolarWinds Platform SQL Injection Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2023-40062 — Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2023-40061 — Insecure Job Execution Mechanism Vulnerability (CVSS 8.8)
- CVE-2023-3622 — Access Control Bypass Vulnerability in the SolarWinds Platform (CVSS 4.3)
- CVE-2023-33229 — SolarWinds Platform Incorrect Input Neutralization Vulnerability (CVSS 3.5)
- CVE-2023-33225 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVSS 7.2)
- CVE-2023-33224 — SolarWinds Platform Incorrect Behavior Order Vulnerability (CVSS 7.2)
- CVE-2023-23844 — SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability (CVSS 7.2)
- CVE-2023-23843 — SolarWinds Platform Incorrect Comparison Vulnerability (CVSS 7.2)
- CVE-2023-23839 — SolarWinds Platform Exposure of Sensitive Information Vulnerability (CVSS 6.5)