OP
IT Management
Orion Platform
On CISA KEVExploited in the wild
50
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 16Low 0
Watch
Add Orion Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10148 In wildKEV | 9.8 | Dec 29 | SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands Affected: 2019.4 HF 5; 2020.2 without hotfix; 2020.2 HF 1 |
| CVE-2021-27258 | 9.8 | Apr 14 | This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2 Affected: 2020.2 |
| CVE-2021-25274 | 9.8 | Feb 3 | The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues Affected: before 2020.2.4 |
| CVE-2019-9546 | 9.8 | Mar 1 | SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service Affected: before 2018.4; 2018.4; 2018.4 |
| CVE-2021-35222 | 9.6 | Aug 31 | This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page Affected: before 2020.2.6 |
| CVE-2020-13169 | 9.0 | Sep 17 | Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages Affected: before 2020.2.1 |
Showing 6