CVE-2023-40062

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-33228

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

CVE-2023-40062

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-33228

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

Remote code execution

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

Information disclosure

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

CVE-2023-33228

CVE-2023-33228 affects SolarWinds Network Configuration Manager. The issue permits users with administrative access to the SolarWinds Web Console to disclose sensitive information. According to NVD, AV Network, PR High, UI N, S U, C High, I/N, A None with a 3.1 base score of 4.9 (Medium). Related...

CVE-2023-33228 SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

CVE-2023-33228 SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

CVE-2023-40062 Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-40062

CVE-2023-40062 affects SolarWinds Platform (Orion Platform). The issue is an incomplete list of disallowed inputs in the BlacklistedFilesChecker, enabling a low-privileged user to execute commands with SYSTEM privileges. Public references indicate affected versions are prior to 2023.4, and mitiga...

CVE-2023-40062 Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

SolarWinds and its CISO accused of misleading investors before major cyberattack

The Securities and Exchange Commission SEC has announced charges against software company SolarWinds Corporation and its chief information security officer CISO, Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” In 202...

SolarWinds Network Configuration Manager Path Traversal Vulnerability

SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A path traversal vulnerability exists in SolarWinds Network Configuration Manager. An attacker could exploit this vulnerability to cause remote code execution...

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of an insecure job execution mechanism vulnerability that could lead to...

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of a remote code execution vulnerability that allows a low-privileged use...

SolarWinds Network Configuration Manager Path Traversal Vulnerability

SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A path traversal vulnerability exists in SolarWinds Network Configuration Manager that stems from vulnerability to a directory traversal remote code execution vulnerability that allows a low-level user to...

PT-2023-24233 · Solarwinds · Solarwinds Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Network Configuration Manager affected versions not specified Description: The issue allows users with administrative access to the SolarWinds Web Console to obtain sensitive information. Recommendations: At the moment, there is no...

CVE-2023-40062: Improper Input Validation

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-33228: Missing Encryption of Sensitive Data

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...