Orion Network Performance Monitor Security Vulnerabilities and Issues — Orion Network Performance Monitor CVE List

Lucene search

SolarwindsOrion Network Performance Monitor

9 matches found

CVE•added 2020/06/24 2:15 p.m.•100 views

CVE-2020-14005

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.

9CVSS8.9AI score0.05026EPSS

CVE•added 2019/02/18 7:29 p.m.•63 views

CVE-2019-8917

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may ...

10CVSS9.8AI score0.45839EPSS

CVE•added 2012/10/31 7:55 p.m.•56 views

CVE-2012-4939

Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field.

4.3CVSS5.8AI score0.01037EPSS

CVE•added 2015/03/10 2:59 p.m.•49 views

CVE-2014-9566

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic Analyzer (NTA) before 4.1, Network Configuration Manager (NCM) before 7.3.2, IP...

7.5CVSS8.1AI score0.78926EPSS

CVE•added 2020/06/24 2:15 p.m.•36 views

CVE-2020-14006

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.

5.4CVSS5.2AI score0.01059EPSS

CVE•added 2011/08/24 10:55 a.m.•35 views

CVE-2010-4828

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and th...

4.3CVSS5.9AI score0.02752EPSS

CVE•added 2012/08/12 4:55 p.m.•32 views

CVE-2012-2577

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.

4.3CVSS5.8AI score0.21828EPSS

CVE•added 2012/08/12 4:55 p.m.•32 views

CVE-2012-2602

Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/O...

6.8CVSS7.4AI score0.07935EPSS

CVE•added 2020/06/24 2:15 p.m.•29 views

CVE-2020-14007

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.

5.4CVSS5.2AI score0.01059EPSS