CVE-2017-7646: Exposure of Sensitive Information to an Unauthorized Actor

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

CVE-2017-7647: Undefined Security Weakness

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands...

SolarWinds Log and Event Manager Local Elevation of Privilege Vulnerability

SolarWinds Log and Event Manager LEM, a.k.a. SIEM is a log and event manager from the U.S.-based SolarWinds that provides real-time log analysis, memory event correlation, and threat attack response. A local elevation of privilege vulnerability exists in SolarWinds Log and Event Manager versions...

PT-2017-3092

Name of the Vulnerable Software and Affected Versions SolarWinds Log & Event Manager LEM versions prior to 6.3.1 Hotfix 4 Description The issue is related to the restrictssh feature in the menuing script of SolarWinds Log & Event Manager LEM. An attacker can exploit this to escape from the...

SolarWinds Log and Event Manager XML External Entity Injection Vulnerability

SolarWinds Log and Event Manager LEM is vulnerable to an Extensible Markup Language XML external entity injection SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SolarWinds Log and Event Manager XML External Entity Injection Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. An XML external entity injection vulnerability exists in SolarWinds Log and Event Manager, which could be exploited by an attacker to obtain...

SolarWinds Log and Event Manager < 6.2.0 Multiple Remote Command Execution Vulnerabilities

According to its self-reported version number, the SolarWinds Log and Event Manager installed on the remote host is prior to version 6.2.0. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the messagebroker/nonsecurestreamingamf service when using the traceroute...

SolarWinds Log and Event Manager Arbitrary Code Execution Vulnerability (CNVD-2015-06702)

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in the command line management console CMC of SolarWinds Log and Event Manager. This allows remote attackers to...

CVE-2015-7839

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

CVE-2015-7839

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

CVE-2015-7839: Improper Neutralization of Special Elements used in a Command

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

PT-2015-7638

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager versions prior to 6.2.0 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature in the command line management console of the affected software...

CVE-2015-7840: Undefined Security Weakness

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

Solarwinds Log and Event Manager Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Solarwinds Log and Event Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within requests to /services/messagebroker/nonsecurestreamingamf utilizing t...

PT-2015-7637

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager LEM affected versions not specified Description The issue allows remote attackers to execute arbitrary commands on managed computers. This is achieved via a request to the...

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504: Undefined Security Weakness

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

PT-2014-6500

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager versions prior to 6.0 Description The issue allows remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL. This is due to the use of static...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...