PT-2022-24206 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands due to the Deserialization of Untrusted Dat...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that stems from susceptibility to deserialization of untrusted data...

SolarWinds Information Service (SWIS) .NET Deserialization From AMQP RCE

The SolarWinds Information Service SWIS is vulnerable to RCE by way of a crafted message received through the AMQP message queue. A malicious user that can authenticate to the AMQP service can publish such a crafted message whose body is a serialized .NET object which can lead to OS command...

SolarWinds SQL Sentry 安全漏洞

SolarWinds SQL Sentry is a SQL Server performance monitoring tool from SolarWinds USA. It is designed to help you quickly identify problems and optimize performance. A security vulnerability exists in SolarWinds SQL Sentry version 2021.10.18 and earlier versions, which stems from the possibility ...

PT-2022-24205 · Solarwinds · Sql Sentry

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Sensitive information could be displayed when a detailed technical error message is posted, potentially disclosing environmental details. Recommendations: At the moment, there is no...

The vulnerability of the Solarwinds Information Service (SWIS) software’s Network Configuration Manager (NCM) allows a hacker to expose user credentials.

The vulnerability of the Solarwinds Information Service SWIS software’s Network Configuration Manager NCM lies in the ability to execute commands remotely. Exploiting this vulnerability could allow a malicious actor to gain access to user credentials...

CVE-2021-35226

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service SWIS. Exposed credentials are encrypted and require authenticated access with an NCM role...

CVE-2021-35226

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service SWIS. Exposed credentials are encrypted and require authenticated access with an NCM role...

CVE-2021-35226

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service SWIS. Exposed credentials are encrypted and require authenticated access with an NCM role...

Design/Logic Flaw

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service SWIS. Exposed credentials are encrypted and require authenticated access with an NCM role...

SolarWinds Hybrid Cloud Observability 加密问题漏洞

SolarWinds Hybrid Cloud Observability is a U.S.-based SolarWinds company that helps organizations ensure availability and reduce remediation time across local and multi-cloud environments by improving visibility, intelligence and productivity. A security vulnerability exists in SolarWinds Hybrid...

CVE-2021-35226: Inadequate Encryption Strength

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service SWIS. Exposed credentials are encrypted and require authenticated access with an NCM role...

CVE-2021-35226 Hashed Credential Exposure Vulnerability

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service SWIS. Exposed credentials are encrypted and require authenticated access with an NCM role...

CVE-2021-35226

CVE-2021-35226 affects SolarWinds Network Configuration Manager (NCM). A misconfiguration in NCM exposes a password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role. Documented impact is limited to credential expos...

PT-2022-5000 · Solarwinds · Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: Network Configuration Manager affected versions not specified Description: The issue is related to a misconfigured entity in the Network Configuration Manager product, which exposes a password field to the Solarwinds Information Service SWIS...

CVE-2022-36965

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform 2022.3.0...

CVE-2022-36965

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform 2022.3.0...

Design/Logic Flaw

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform 2022.3.0...

CVE-2022-36965 Stored and DOM XSS in QoE Applications: Orion Platform

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform 2022.3.0...

CVE-2022-36965

The CVE-2022-36965 entry concerns SolarWinds Orion Platform’s QoE application, where insufficient sanitization of inputs in the QoE input field could enable stored and DOM-based XSS. The issue is documented as fixed in SolarWinds Platform version 2022.3.0. Affected component: QoE input handling; ...