3087 matches found
CVE-2023-33224
The CVE-2023-33224 entry concerns the SolarWinds Platform (SolarWinds Orion Platform) and describes an Incorrect Behavior Order Vulnerability. The issue allows users with administrative access to the SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges, due to an i...
CVE-2023-33224 SolarWinds Platform Incorrect Behavior Order Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...
CVE-2023-33225 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-33225
CVE-2023-33225 affects SolarWinds Platform (and related Web Console components) via an Incorrect Comparison vulnerability that lets users with administrative access execute arbitrary commands with SYSTEM privileges. The issue is described across multiple connected sources as allowing command exec...
CVE-2023-33225 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-23844
The CVE-2023-23844 entry concerns SolarWinds Platform/Orion Platform and a vulnerability titled an Incorrect Comparison Vulnerability. Affected: SolarWinds Platform (Web Console access) with administrative privileges could lead to execution of arbitrary commands with SYSTEM privileges. Root cause...
CVE-2023-23844 SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
CVE-2023-23844 SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform. An attacker could exploit the vulnerability to execute arbitrary commands...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform. An attacker could exploit the vulnerability to execute arbitrary commands with SYSTEM privileges...
SolarWinds Platform 授权问题漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from an authorization issue vulnerability that stems from an access control bypass issue. A low-privilege attacker could exploit this...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform versions prior to 2023.3 that originates from allowing a user with administrative access to the SolarWinds Web Consol...
PT-2023-24234 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML, due to incorrect input neutralization...
PT-2023-4341 · Solarwinds · Solarwinds Orion Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: The issue allows users with administrative access to the SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. This is due to an Incorrect...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in versions of SolarWinds Platform prior to 2023.3 that stems from vulnerability to an incorrect sequence of behavior that allows a user wit...
SolarWinds Network Configuration Manager 路径遍历漏洞
SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A security vulnerability exists in SolarWinds Network Configuration Manager that stems from a directory traversal vulnerability. An attacker with administrative access could exploit the vulnerability to execu...
SolarWinds Platform 代码注入漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from SolarWinds USA. A security vulnerability exists in SolarWinds Platform versions prior to 2023.3 that originates from a hole that allows remote attackers with SolarWinds Platform account privileges to...
PT-2023-25486 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows an underprivileged user to bypass access controls and read arbitrary resources. Recommendations: At the moment, there is no information about a newer version th...