VendorsSolarwindsorion_platform2020.2.6
Vulnerabilities

Solarwinds Orion Platform 2016.1 Hotfix 1 2020.2.6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

12CVEs
CVE-2022-36958
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-10-20 · Modified
8.8EPSS 0.815
CVE-2022-36964
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-11-29 · Modified
8.8EPSS 0.168
CVE-2021-35234
Exposed Dangerous Functions - Privileged Escalation
Published 2021-12-20 · Modified
8.8EPSS 0.028
CVE-2022-36960
SolarWinds Platform Improper Input Validation
Published 2022-11-29 · Modified
8.8EPSS 0.009
CVE-2021-35244
Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6
Published 2021-12-20 · Modified
8.5EPSS 0.058
CVE-2021-35239
Stored XSS in Maps text box hyperlink Vulnerability
Published 2021-08-31 · Modified
7.5EPSS 0.010
CVE-2022-38108
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-10-20 · Modified
7.2EPSS 0.689
CVE-2022-36957
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-10-20 · Modified
7.2EPSS 0.128
CVE-2022-36962
SolarWinds Platform Command Injection
Published 2022-11-29 · Modified
7.2EPSS 0.093
CVE-2021-35248
Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users
Published 2021-12-20 · Modified
6.8EPSS 0.009
CVE-2022-36966
Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
Published 2022-10-20 · Modified
5.4EPSS 0.004
CVE-2021-35238
Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability
Published 2021-09-01 · Modified
4.8EPSS 0.011