3593 matches found
CVE-2023-23843 SolarWinds Platform Incorrect Comparison Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands...
CVE-2023-33224 SolarWinds Platform Incorrect Behavior Order Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...
CVE-2023-33224 SolarWinds Platform Incorrect Behavior Order Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...
CVE-2023-33224
The CVE-2023-33224 entry concerns the SolarWinds Platform (SolarWinds Orion Platform) and describes an Incorrect Behavior Order Vulnerability. The issue allows users with administrative access to the SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges, due to an i...
CVE-2023-33225 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-33225 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-33225
CVE-2023-33225 affects SolarWinds Platform (and related Web Console components) via an Incorrect Comparison vulnerability that lets users with administrative access execute arbitrary commands with SYSTEM privileges. The issue is described across multiple connected sources as allowing command exec...
CVE-2023-23844 SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-23844 SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-23844
The CVE-2023-23844 entry concerns SolarWinds Platform/Orion Platform and a vulnerability titled an Incorrect Comparison Vulnerability. Affected: SolarWinds Platform (Web Console access) with administrative privileges could lead to execution of arbitrary commands with SYSTEM privileges. Root cause...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform. An attacker could exploit the vulnerability to execute arbitrary commands with SYSTEM privileges...
SolarWinds Network Configuration Manager 路径遍历漏洞
SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A security vulnerability exists in SolarWinds Network Configuration Manager that stems from a directory traversal vulnerability. An attacker with administrative access could exploit the vulnerability to execu...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform versions prior to 2023.3 that originates from allowing a user with administrative access to the SolarWinds Web Consol...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in versions of SolarWinds Platform prior to 2023.3 that stems from vulnerability to an incorrect sequence of behavior that allows a user wit...
PT-2023-24234 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML, due to incorrect input neutralization...
CVE-2023-33229: Improper Control of Generation of Code
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...
SolarWinds Platform 代码注入漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from SolarWinds USA. A security vulnerability exists in SolarWinds Platform versions prior to 2023.3 that originates from a hole that allows remote attackers with SolarWinds Platform account privileges to...
CVE-2023-33224: Incorrect Behavior Order
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...
PT-2023-4341 · Solarwinds · Solarwinds Orion Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: The issue allows users with administrative access to the SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. This is due to an Incorrect...
CVE-2023-23844: Incomplete List of Disallowed Inputs
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...