CVE-2020-14006

SolarWinds Orion is affected by CVE-2020-14006 due to a cross-site scripting flaw in the Web Console (WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4). The issue stems from inadequate validation of client-supplied data by the WEB application, enabling an attacker to run client‑side code. Docum...

CVE-2020-14007

CVE-2020-14007 affects SolarWinds Orion: XSS via the name of an alert definition in Web Console WPM 2019.4.1 and Orion Platform HF4 / NPM HF2 2019.4. The vulnerability is caused by insufficient validation of client-supplied data in the WEB application, enabling crafted input to execute script on ...

CVE-2020-14007

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

PT-2020-13833 · Solarwinds · Solarwinds Orion

Name of the Vulnerable Software and Affected Versions: Solarwinds Orion versions 2019.4.1 through 2019.4 with Web Console WPM and Orion Platform HF4 or NPM HF2 Description: The issue allows remote attackers to execute arbitrary code via a defined event. This can be achieved through command...

SolarWinds Advanced Monitoring Agent Elevation of Privilege Vulnerability

SolarWinds Advanced Monitoring Agent is a set of monitoring agent software from SolarWinds Inc. in the United States. The software is mainly used for remote monitoring and management of servers and so on. A security vulnerability exists in SolarWinds Advanced Monitoring Agent versions prior to...

CVE-2020-13912

SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...

CVE-2020-13912

SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...

Design/Logic Flaw

SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...

CVE-2020-13912

SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...

CVE-2020-13912

The CVE-2020-13912 entry relates to SolarWinds Advanced Monitoring Agent (pre-10.8.9) where a local user can escalate privileges by exploiting a writable .exe file. Core details from connected sources indicate an elevation of privilege via a Trojan horse .exe, caused by broad write access to a sp...

Dameware Remote Support 12.1.1.273 Buffer Overflow

Exploit Title: Dameware Remote Support 12.1.1.273 - Buffer Overflow SEH Exploit Author: gurbanli Date: 2020-05-13 Vulnerable Software: Solarwinds Dameware Remote Support 12.1.1.273 Vendor Homepage: https://www.solarwinds.com/ Version: 12.1.1.273 Software Link:...

Dameware Remote Support 12.1.1.273 - Buffer Overflow (SEH) Exploit

Exploit Title: Dameware Remote Support 12.1.1.273 - Buffer Overflow SEH Exploit Author: gurbanli Vulnerable Software: Solarwinds Dameware Remote Support 12.1.1.273 Vendor Homepage: https://www.solarwinds.com/ Version: 12.1.1.273 Software Link:...

Dameware Remote Support 12.1.1.273 - Buffer Overflow (SEH)

Exploit Title: Dameware Remote Support 12.1.1.273 - Buffer Overflow SEH Exploit Author: gurbanli Date: 2020-05-13 Vulnerable Software: Solarwinds Dameware Remote Support 12.1.1.273 Vendor Homepage: https://www.solarwinds.com/ Version: 12.1.1.273 Software Link:...

SolarWinds MSP PME Cache Service 1.1.14 - Insecure File Permissions

Title: SolarWinds MSP PME Cache Service 1.1.14 - Insecure File Permissions Author: Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG Date: 2020-05-06 Vendor: https://www.solarwindsmsp.com/ CVE: CVE-2020-12608 GitHub: https://github.com/jensregel/Advisories/tree/master/CVE-2020-12608 CVSSv3:...

SolarWinds MSP PME (Patch Management Engine) Cache Service Code Execution Vulnerability

SolarWinds Advanced Monitoring Agent is a set of monitoring agent software from SolarWinds, Inc. The software is mainly used for remote monitoring and management of servers, etc. SolarWinds MSP PME Cache Service is one of the patch management engine cache service. A security vulnerability exists ...

CVE-2020-12608

An issue was discovered in SolarWinds MSP PME Patch Management Engine Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config. This can lead to code execution by changing the...

CVE-2020-12608

An issue was discovered in SolarWinds MSP PME Patch Management Engine Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config. This can lead to code execution by changing the...

Design/Logic Flaw

An issue was discovered in SolarWinds MSP PME Patch Management Engine Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config. This can lead to code execution by changing the...

CVE-2020-12608

An issue was discovered in SolarWinds MSP PME Patch Management Engine Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config. This can lead to code execution by changing the...

CVE-2020-12608

Summary (concrete details known): The vulnerability CVE-2020-12608 affects SolarWinds MSP PME (Patch Management Engine) Cache Service in the Advanced Monitoring Agent, with versions before 1.1.15. The root cause is insecure file permissions on the config directory under %PROGRAMDATA%\SolarWinds M...