CVE-2024-29001 SolarWinds Platform SWQL Injection Vulnerability

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited...

CVE-2024-29001 SolarWinds Platform SWQL Injection Vulnerability

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited...

CVE-2024-29001

CVE-2024-29001 is a SolarWinds Platform SWQL Injection vulnerability identified in the user interface that requires authentication and user interaction to exploit. Connected sources corroborate this as a UI SWQL/SQL-injection issue with high impact (confidentiality, integrity, availability) and a...

CVE-2024-28076 SolarWinds Platform Arbitrary Open Redirection Vulnerability

The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format...

CVE-2024-28076

SolarWinds Platform is affected by CVE-2024-28076, an Arbitrary Open Redirection vulnerability. The issue enables redirection to a different domain via a URL parameter with a correctly formatted relative entry. Affected product is SolarWinds Platform; root cause involves improper handling of URL ...

CVE-2024-28076 SolarWinds Platform Arbitrary Open Redirection Vulnerability

The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format...

SolarWinds Platform 跨站脚本漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Platform that stems from allowing the execution of malicious scripts that can lead to data disclosure...

SolarWinds Platform SQL注入漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from SolarWinds Corporation, USA. SolarWinds Platform suffers from a SQL injection vulnerability that stems from SQL injection in the user interface...

SolarWinds Platform 输入验证错误漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from an attacker being able to redirect a user to a different domain when using URL...

PT-2024-7954 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions prior to 2024.1 Description: The issue is related to a reflected cross-site scripting vulnerability in the web console of the SolarWinds Platform. This vulnerability requires a high-privileged user and user...

PT-2024-22253 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a potential attacker to redirect to different domains when using a URL parameter with a relative entry in the correct format. This is related to an Arbitrary Op...

PT-2024-3094 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: A vulnerability was identified in the user interface of the SolarWinds Platform, related to a SWQL injection issue. This vulnerability requires authentication and user interacti...

PT-2024-3481 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to a XSS vulnerability in the maps section of the user interface. This vulnerability requires authentication and user interaction to be exploited. It may...

SolarWinds Serv-U 15.4.1.0 < 15.4.2

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2. It is, therefore, affected by a vulnerability as referenced in the solarwindsserv-u1542 advisory. - SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerabilit...

SolarWinds Serv-U < 15.4.2 Directory Traversal (CVE-2024-28073)

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2. It is, therefore, affected by a directory traversal remote code vulnerability as referenced in the serv-u1542 advisory. This vulnerability requires a highly privileged account to be exploited. Note that Nessus has n...

CVE-2024-28073

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

CVE-2024-28073

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

CVE-2024-28073

CVE-2024-28073 affects SolarWinds Serv-U File Server. Multiple sources confirm a Directory Traversal Remote Code Execution vulnerability that requires a highly privileged account to exploit. The issue is associated with versions prior to 15.4.2 (e.g., Serv-U 15.4.1.x and earlier) and can lead to ...

CVE-2024-28073 SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

CVE-2024-28073 SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...