3431 matches found
CVE-2020-14006
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
Sql injection
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...
Cross site scripting
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
Design/Logic Flaw
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...
CVE-2020-14005
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...
CVE-2020-14005
SolarWinds Orion Platform (Web Console WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4) is affected by CVE-2020-14005, a remote code execution vulnerability. The issue allows an attacker to execute arbitrary code via a defined event, with exploitation details tied to command-injection-like pat...
CVE-2020-14006
SolarWinds Orion is affected by CVE-2020-14006 due to a cross-site scripting flaw in the Web Console (WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4). The issue stems from inadequate validation of client-supplied data by the WEB application, enabling an attacker to run client‑side code. Docum...
CVE-2020-14006
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
CVE-2020-14007
CVE-2020-14007 affects SolarWinds Orion: XSS via the name of an alert definition in Web Console WPM 2019.4.1 and Orion Platform HF4 / NPM HF2 2019.4. The vulnerability is caused by insufficient validation of client-supplied data in the WEB application, enabling crafted input to execute script on ...
CVE-2020-14007
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...
CVE-2020-14006: Improper Neutralization of Input During Web Page Generation
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
CVE-2020-14005: Undefined Security Weakness
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...
CVE-2020-14007: Improper Neutralization of Input During Web Page Generation
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...
PT-2020-13833 · Solarwinds · Solarwinds Orion
Name of the Vulnerable Software and Affected Versions: Solarwinds Orion versions 2019.4.1 through 2019.4 with Web Console WPM and Orion Platform HF4 or NPM HF2 Description: The issue allows remote attackers to execute arbitrary code via a defined event. This can be achieved through command...
SolarWinds Advanced Monitoring Agent Elevation of Privilege Vulnerability
SolarWinds Advanced Monitoring Agent is a set of monitoring agent software from SolarWinds Inc. in the United States. The software is mainly used for remote monitoring and management of servers and so on. A security vulnerability exists in SolarWinds Advanced Monitoring Agent versions prior to...
CVE-2020-13912
SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...
CVE-2020-13912
SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...
Design/Logic Flaw
SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...
CVE-2020-13912
The CVE-2020-13912 entry relates to SolarWinds Advanced Monitoring Agent (pre-10.8.9) where a local user can escalate privileges by exploiting a writable .exe file. Core details from connected sources indicate an elevation of privilege via a Trojan horse .exe, caused by broad write access to a sp...