What’s Vulnerable › Vulnerabilities

CVE-2024-52611: SolarWinds Platform Information Disclosure Vulnerability

• Severity: low (CVSS 3.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-11 · updated 2026-06-17
• Weakness: CWE-209

Description

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.

Affected products

• SolarWinds Platform: before 2025.1 — fixed in 2025.1

How to fix

Upgrade to a fixed version: SolarWinds Platform 2025.1. Check the vendor advisory for mitigations.

References

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-52611

Get alerted when CVE-2024-52611 or the next vulnerability affects your stack