CVE-2023-35188 SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-35188 SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-50395 SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-50395 SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-50395

CVE-2023-50395 concerns the SolarWinds Platform (Orion Platform) with a SQL Injection leading to Remote Code Execution via an update statement. Exploitation requires user authentication; impact is described as high (C/H/I/A) with CVSS v3.1 base score 8.0. Public references indicate multiple sourc...

SolarWinds Platform SQL Injection Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from a SQL injection vulnerability. An attacker could exploit the vulnerability to remotely execute code...

PT-2024-1768 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve...

PT-2024-1656 · Solarwinds · Solarwinds Orion Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: A SQL Injection Remote Code Execution issue was discovered in the SolarWinds Platform, specifically using an update statement. This issue requires user authentication to b...

PT-2024-1657 · Solarwinds · Solarwinds Orion Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: A SQL Injection Remote Code Execution vulnerability was found in the SolarWinds Platform, which can be exploited using a create statement. This issue requires user...

SolarWinds Platform SQL Injection Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from a SQL injection vulnerability. An attacker could exploit the vulnerability to remotely execute code...

PT-2024-1747 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager is susceptible to a Remote Code Execution issue. This issue allows an authenticated user to abuse a SolarWinds service, resulti...

PT-2024-1770 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager ARM is susceptible to a Directory Traversal Remote Code Execution issue. If exploited, this issue allows an unauthenticated use...

SolarWinds Platform < 2023.3 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20233 advisory. - The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability...

PT-2024-4875 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the createGlobalServerChannelInternal method in SolarWinds Access Rights Manager, which has weaknesses in its deserialization mechanism. Thi...

Microsoft Executives’ Emails Breached by Russia Hackers

By Waqas The SolarWinds-infamous hackers, Nobelium, have struck again. This is a post from HackRead.com Read the original post: Microsoft Executives Emails Breached by Russia Hackers...

PT-2024-4874 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the UserScriptHumster class of the SolarWinds Access Rights Manager. This allows an...

PT-2024-4873 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to a Directory Traversal and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability allows an...

PT-2024-1932

Name of the Vulnerable Software and Affected Versions SolarWinds Security Event Manager affected versions not specified Description The SolarWinds Security Event Manager is susceptible to a Remote Code Execution vulnerability. This issue allows an unauthenticated user to abuse SolarWinds' service...

PT-2024-4877 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Directory Traversal Remote Code Execution vulnerability in the Connect method of SolarWinds Access Rights Manager ARM. This...

PT-2024-5109 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to an Arbitrary File Deletion and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability is associate...