PT-2019-8970

Name of the Vulnerable Software and Affected Versions SolarWinds Network Performance Monitor version 12.3 Description The issue allows SQL Injection via the "/api/ActiveAlertsOnThisEntity/GetActiveAlerts" TriggeringObjectEntityNames parameter. Recommendations For SolarWinds Network Performance...

CVE-2018-13442: Improper Neutralization of Special Elements used in an SQL Command

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...