668 matches found
CVE-2020-14006
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
Cross site scripting
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
Design/Logic Flaw
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...
CVE-2020-14005
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows remote attackers to execute arbitrary code via a defined event...
CVE-2020-14005
SolarWinds Orion Platform (Web Console WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4) is affected by CVE-2020-14005, a remote code execution vulnerability. The issue allows an attacker to execute arbitrary code via a defined event, with exploitation details tied to command-injection-like pat...
CVE-2020-14006
SolarWinds Orion is affected by CVE-2020-14006 due to a cross-site scripting flaw in the Web Console (WPM 2019.4.1, Orion Platform HF4 or NPM HF2 2019.4). The issue stems from inadequate validation of client-supplied data by the WEB application, enabling an attacker to run client‑side code. Docum...
CVE-2020-14006
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...
CVE-2020-14007
CVE-2020-14007 affects SolarWinds Orion: XSS via the name of an alert definition in Web Console WPM 2019.4.1 and Orion Platform HF4 / NPM HF2 2019.4. The vulnerability is caused by insufficient validation of client-supplied data in the WEB application, enabling crafted input to execute script on ...
CVE-2020-14007
Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...
PT-2020-13833 · Solarwinds · Solarwinds Orion
Name of the Vulnerable Software and Affected Versions: Solarwinds Orion versions 2019.4.1 through 2019.4 with Web Console WPM and Orion Platform HF4 or NPM HF2 Description: The issue allows remote attackers to execute arbitrary code via a defined event. This can be achieved through command...
SolarWinds Orion Platform Information Disclosure Vulnerability
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...
CVE-2019-12864
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query...
CVE-2019-12864
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query...
CVE-2019-12864
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is affected by an Information Leakage vulnerability caused by improper error handling that exposes stack traces and a full pathname on a 500 Internal Server Error. The issue is demonstrated via the api2/swis/query?lang=en-us&swAlertOn...
oriontechnologies.co.in Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135360 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting oriontechnologies.co.in...
SolarWinds Orion Platform HTML Injection Vulnerability
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...
CVE-2019-12863
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 allows Stored HTML Injection by administrators via the Web Console Settings screen...
Design/Logic Flaw
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 allows Stored HTML Injection by administrators via the Web Console Settings screen...
CVE-2019-12863
CVE-2019-12863 affects SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4). The vulnerability is a stored HTML injection via the Web Console Settings screen, reported as an input/output issue in the web interface and attributable to administrators being able to inject HTML. The availab...