CVE-2016-4350

CVE-2016-4350 affects SolarWinds SRM Profiler (formerly STM) Web Services before 6.2.3. Multiple SQL injection vulnerabilities exist across numerous servlets (e.g., ScriptServlet, WindowsEventLogsServlet, ProcessesServlet, BackupExceptionsServlet, BackupAssociationServlet, HostStorageServlet, Dup...

PT-2016-5897

Name of the Vulnerable Software and Affected Versions SolarWinds Storage Resource Monitor SRM Profiler versions prior to 6.2.3 Description The issue concerns multiple SQL injection vulnerabilities in the Web Services web server. These vulnerabilities allow remote attackers to execute arbitrary SQ...

SolarWinds Storage Resource Monitor Profiler Module ProcessesServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the ProcessesServlet servlet in the...