VendorsSolarwindsorion_platform2020.2.6
Vulnerabilities

Solarwinds Orion Platform 2020.2.6

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

12CVEs
CVE-2022-36958
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-10-20 · Modified
8.8EPSS 0.819
CVE-2022-36964
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-11-29 · Modified
8.8EPSS 0.178
CVE-2021-35234
Exposed Dangerous Functions - Privileged Escalation
Published 2021-12-20 · Modified
8.8EPSS 0.029
CVE-2022-36960
SolarWinds Platform Improper Input Validation
Published 2022-11-29 · Modified
8.8EPSS 0.010
CVE-2021-35244
Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6
Published 2021-12-20 · Modified
8.5EPSS 0.060
CVE-2021-35239
Stored XSS in Maps text box hyperlink Vulnerability
Published 2021-08-31 · Modified
7.5EPSS 0.010
CVE-2022-38108
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-10-20 · Modified
7.2EPSS 0.666
CVE-2022-36957
SolarWinds Platform Deserialization of Untrusted Data
Published 2022-10-20 · Modified
7.2EPSS 0.150
CVE-2022-36962
SolarWinds Platform Command Injection
Published 2022-11-29 · Modified
7.2EPSS 0.094
CVE-2021-35248
Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users
Published 2021-12-20 · Modified
6.8EPSS 0.009
CVE-2022-36966
Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
Published 2022-10-20 · Modified
5.4EPSS 0.005
CVE-2021-35238
Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability
Published 2021-09-01 · Modified
4.8EPSS 0.011