CVE-2022-36961 Orion Platform SQL Injection Privilege Escalation Vulnerability

A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution...

CVE-2022-36961

CVE-2022-36961–A vulnerability in SolarWinds Orion Platform: a vulnerable component permits SQL Injection. An authenticated attacker could exploit it for privilege escalation or remote code execution. The Connected documents indicate mitigations via SolarWinds updates (notably the 2022.3 release ...

PT-2022-23708 · Unknown · Oroplatform

Name of the Vulnerable Software and Affected Versions: Orion Platform affected versions not specified Description: The issue concerns a vulnerable component of the Orion Platform that is susceptible to SQL Injection. An authenticated attacker could exploit this for privilege escalation or remote...

Solarwinds Orion Platform 跨站脚本漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, as well as support for customized web interfaces, multiple user comments, and a mapped view of the entire...

SolarWinds Orion Platform < 2022.3 Multiple Vulnerabilities

The version of SolarWinds Orion Platform installed on the remote host is prior to 2022.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20223 advisory. - A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated...

SolarWinds Orion Platform 2020.2.0 < 2020.2.4

The version of SolarWinds Orion Platform installed on the remote host is prior to 2020.2.4. It is, therefore, affected by a vulnerability as referenced in the orionplatform202024 advisory. - This vulnerability allows remote attackers to execute escalate privileges on affected installations of...

SolarWinds Orion Platform Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of alert creation. The issue results from the lack of proper validati...

The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring allows a intruder to escalate their privileges or execute arbitrary code.

The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring involves unlimited uploading of dangerous files. Exploiting this vulnerability could allow a malicious actor to increase their privileges or execute arbitrary code...

Vulnerabilities fixed in SolarWinds Orion

SolarWinds has fixed vulnerabilities in Orion. The vulnerabilities marked CVE-2021-35234 and CVE-2021-35248 allow an authenticated malicious person to gain access to user data, including hashed passwords and information about salts used. In addition, a malicious person with alert management...

CVE-2021-35244

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...

Unrestricted file upload

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...

CVE-2021-35244 Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...

EUVD-2021-21887

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...

CVE-2021-35244

CVE-2021-35244 affects SolarWinds Orion Platform: the Log alert to a file action in Orion alert management allows an authenticated user with alert-management rights to write to arbitrary files, enabling an unrestricted file upload and remote code execution. Public disclosures (ZDI-22-375) describ...

Solarwinds Orion Platform 代码问题漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user comments, and a mapped view of the entire network. The...

Solarwinds Orion Platform访问控制错误漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, as well as support for customized web interfaces, multiple user opinions, and a mapped view of the entire...

SolarWinds Orion Platform 2020.2.6 < 2020.2.6 HF3 SQLI

The version of SolarWinds Orion Platform installed on the remote host is prior to 2020.2.6 HF3. It is, therefore, affected by a vulnerability as referenced in the orionplatform202026hf3 advisory. - Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leadi...

The vulnerability of the ActionPluginBaseView component in the SolarWinds Orion Platform software for network monitoring allows a hacker to execute arbitrary code.

The vulnerability of the ActionPluginBaseView component in SolarWinds Orion Platform’s network monitoring software lies in the ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software monitoring solution allows a hacker to elevate their privileges to the level of an administrator.

The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software-related network monitoring system is related to deficiencies in access control and insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to elevate their privilege...

SolarWinds Orion Platform NCM SCM IPAM SaveUserSetting Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper restriction...