SolarWinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-24893)

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

SolarWinds Orion Platform Code Execution Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

CVE-2020-14007

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

CVE-2020-14006

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...

CVE-2020-14005

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...

CVE-2020-14007

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

CVE-2020-14005

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...

CVE-2020-14006

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...

Cross site scripting

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...

Sql injection

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...

Design/Logic Flaw

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

CVE-2020-14005

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...

CVE-2020-14005

SolarWinds Orion Platform (Web Console WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4) is affected by CVE-2020-14005, a remote code execution vulnerability. The issue allows an attacker to execute arbitrary code via a defined event, with exploitation details tied to command-injection-like pat...

CVE-2020-14006

SolarWinds Orion is affected by CVE-2020-14006 due to a cross-site scripting flaw in the Web Console (WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4). The issue stems from inadequate validation of client-supplied data by the WEB application, enabling an attacker to run client‑side code. Docum...

CVE-2020-14006

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...

CVE-2020-14007

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

CVE-2020-14007

CVE-2020-14007 affects SolarWinds Orion: XSS via the name of an alert definition in Web Console WPM 2019.4.1 and Orion Platform HF4 / NPM HF2 2019.4. The vulnerability is caused by insufficient validation of client-supplied data in the WEB application, enabling crafted input to execute script on ...

PT-2020-13834

Name of the Vulnerable Software and Affected Versions Solarwinds Orion versions 2019.4.1 Description The issue allows for cross-site scripting XSS attacks. XSS is a type of attack where an attacker injects malicious code into a website, which is then executed by the user's browser. This can lead ...

CVE-2020-14007: Improper Neutralization of Input During Web Page Generation

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

CVE-2020-14006: Improper Neutralization of Input During Web Page Generation

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...