Lucene search
SolarWindsCVELIST:CVE-2024-29001HistoryApr 18, 2024 - 9:06 a.m.
CVE-2024-29001 SolarWinds Platform SWQL Injection Vulnerability
2024-04-1809:06:41
CWE-89
SolarWinds
www.cve.org
1
solarwinds
swql injection
vulnerability
authentication
user interaction
7.5 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
0.0004 Low
EPSS
Percentile
9.0%
A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "SolarWinds Platform ",
"vendor": "SolarWinds ",
"versions": [
{
"status": "affected",
"version": "2024.1 and previous versions "
}
]
}
]Related
nvd
nvd
CVE-2024-29001
2024-04-18 09:15:11
cve
cve
CVE-2024-29001
2024-04-18 09:15:11
nessus
nessus
SolarWinds Platform 2024.0 < 2024.1.1 Multiple Vulnerabilities XSS
2024-04-19 00:00:00
7.5 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
0.0004 Low
EPSS
Percentile
9.0%
Related for CVELIST:CVE-2024-29001