CVE-2022-38108

The CVE-2022-38108 issue affects SolarWinds Platform, specifically the SWIS component. It is a deserialization vulnerability in SWIS that can lead to OS command execution when a crafted AMQP message is processed; an attacker must authenticate to the AMQP service with SolarWinds access (e.g., an O...

CVE-2022-38108 SolarWinds Platform Deserialization of Untrusted Data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-36958 SolarWinds Platform Deserialization of Untrusted Data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-36958 SolarWinds Platform Deserialization of Untrusted Data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-36958

CVE-2022-36958 : The SolarWinds Platform (Orion) prior to 2022.4 is affected by a Deserialization of Untrusted Data vulnerability. The issue lets an attacker who has valid access to the SolarWinds Web Console execute arbitrary commands on the affected system. Root cause is deserialization of untr...

CVE-2022-36957 SolarWinds Platform Deserialization of Untrusted Data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-36957

CVE-2022-36957 concerns SolarWinds Platform (Orion) where the Web Console deserializes untrusted data, enabling remote command execution. The vulnerability arises from a deserialization flaw that allows an attacker with Orion admin-level access to execute arbitrary commands on affected installati...

CVE-2022-36966 Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference IDOR vulnerability in SolarWinds Platform 2022.3 and previous...

CVE-2022-36966 Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference IDOR vulnerability in SolarWinds Platform 2022.3 and previous...

CVE-2022-36966

CVE-2022-36966 affects SolarWinds Platform (Orion Platform) 2022.3 and older. The root cause is insufficient control on a URL parameter causing an insecure direct object reference (IDOR). The impact is that users with Node Management rights can view and edit all nodes. Mitigation: update to a ver...

PT-2022-23705 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue concerns the Deserialization of Untrusted Data, allowing a remote adversary with valid access to the SolarWinds Web Console to execute arbitrary commands. This can be...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that stems from its susceptibility to deserialization of untrustworthy data leading to the execution of arbitrary...

PT-2022-23704 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands due to the Deserialization of Untrusted Dat...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that stems from susceptibility to deserialization of untrusted data...

PT-2022-24206 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands due to the Deserialization of Untrusted Dat...

SolarWinds Platform 安全漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform version 2022.3 and prior versions that stems from an insecure direct object reference IDOR. An attacker with node...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A code issue vulnerability exists in SolarWinds Platform that stems from its susceptibility to deserialization of untrusted data leading to the execution of arbitrary...

SolarWinds SQL Sentry 安全漏洞

SolarWinds SQL Sentry is a SQL Server performance monitoring tool from SolarWinds USA. It is designed to help you quickly identify problems and optimize performance. A security vulnerability exists in SolarWinds SQL Sentry version 2021.10.18 and earlier versions, which stems from the possibility ...

PT-2022-24205 · Solarwinds · Sql Sentry

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Sensitive information could be displayed when a detailed technical error message is posted, potentially disclosing environmental details. Recommendations: At the moment, there is no...

The vulnerability of the Solarwinds Information Service (SWIS) software’s Network Configuration Manager (NCM) allows a hacker to expose user credentials.

The vulnerability of the Solarwinds Information Service SWIS software’s Network Configuration Manager NCM lies in the ability to execute commands remotely. Exploiting this vulnerability could allow a malicious actor to gain access to user credentials...