Where
-Infinity
0

Trending

Last week
Last month
Last year

SolarWinds Orion PlatformZDI-24-171: SolarWinds Orion Platform AppendUpdate SQL Injection Remote Code Execution Vulnerability

Risk 23

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-50395.

First published (updated )
ZDI-CAN-21894

SolarWinds Orion PlatformSolarWinds Orion Platform AppendUpdate SQL Injection Remote Code Execution Vulnerability

Risk 23

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-50395.

First published (updated )
Advisory
ZDI-24-171

SolarWinds Orion PlatformSolarWinds Orion Platform AppendCreatePrimary SQL Injection Remote Code Execution Vulnerability

Risk 23

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-35188.

First published (updated )
Advisory
ZDI-24-170

SolarWinds Orion PlatformZDI-24-170: SolarWinds Orion Platform AppendCreatePrimary SQL Injection Remote Code Execution Vulnerability

Risk 23

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-35188.

First published (updated )
ZDI-CAN-21895

SolarWinds Orion PlatformZDI-23-1762: SolarWinds Orion Platform VimChartInfo SQL Injection Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-40056.

First published (updated )
ZDI-CAN-21962

SolarWinds Orion PlatformSolarWinds Orion Platform VimChartInfo SQL Injection Remote Code Execution Vulnerability

Risk 49

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-40056.

First published (updated )
Advisory
ZDI-23-1762

SolarWinds Orion PlatformSolarWinds Orion Platform BlacklistedFilesChecker Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-40062.

First published (updated )
Advisory
ZDI-23-1584

SolarWinds Orion PlatformZDI-23-1584: SolarWinds Orion Platform BlacklistedFilesChecker Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

Risk 49

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-40062.

First published (updated )
ZDI-CAN-21839

SolarWinds Orion PlatformSolarWinds Orion Platform UpdateActionsProperties Exposed Dangerous Method Remote Code Execution Vulnerability

Risk 49

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-23845.

First published (updated )
Advisory
ZDI-23-1443

SolarWinds Orion PlatformZDI-23-1443: SolarWinds Orion Platform UpdateActionsProperties Exposed Dangerous Method Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-23845.

First published (updated )
ZDI-CAN-21097

SolarWinds Orion PlatformZDI-23-1444: SolarWinds Orion Platform UpdateAction Exposed Dangerous Method Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-23840.

First published (updated )
ZDI-CAN-21117

SolarWinds Orion PlatformSolarWinds Orion Platform UpdateAction Exposed Dangerous Method Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-23840.

First published (updated )
Advisory
ZDI-23-1444

SolarWinds Orion PlatformSolarWinds Platform Exposed Dangerous Method Vulnerability

Risk 66
Severity
7.2
AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

1 / 3

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.3.1
First published (updated )
CVE-2023-23845

SolarWinds Orion PlatformSolarWinds Platform Exposed Dangerous Method Vulnerability

Risk 66
Severity
7.2
AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

1 / 3

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.3.1
First published (updated )
CVE-2023-23840

SolarWinds Orion PlatformSolarWinds Orion Platform UpdateActionsProperties Incorrect Comparison Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
Advisory
ZDI-23-1003

SolarWinds Orion PlatformZDI-23-1003: SolarWinds Orion Platform UpdateActionsProperties Incorrect Comparison Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
ZDI-CAN-21096

SolarWinds Orion PlatformSolarWinds Orion Platform BlacklistedFilesChecker Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
Advisory
ZDI-23-1004

SolarWinds Orion PlatformZDI-23-1004: SolarWinds Orion Platform BlacklistedFilesChecker Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

Risk 43

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
ZDI-CAN-21095

SolarWinds Orion PlatformSolarWinds Orion Platform SendHttpRequest Missing Authorization Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
Advisory
ZDI-23-1006

SolarWinds Orion PlatformZDI-23-1006: SolarWinds Orion Platform SendHttpRequest Missing Authorization Remote Code Execution Vulnerability

Risk 49

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
ZDI-CAN-21090

SolarWinds Orion PlatformZDI-23-1005: SolarWinds Orion Platform UpdateActionsProperties Incorrect Behavior Order Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
ZDI-CAN-21105

SolarWinds Orion PlatformSolarWinds Orion Platform UpdateActionsProperties Incorrect Behavior Order Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
Advisory
ZDI-23-1005

SolarWinds Orion PlatformSolarWinds Platform Local Privilege Escalation Vulnerability

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.2
First published (updated )
CVE-2022-47505

SolarWinds Orion PlatformSolarWinds Platform Deserialization of Untrusted Data Vulnerability

Risk 66
Severity
7.2
Code Injection, Command Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.2
First published (updated )
CVE-2022-36963

SolarWinds Orion PlatformSolarWinds Platform Incorrect Input Neutralization Vulnerability

Risk 38
Severity
6.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML.

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.2
First published (updated )
CVE-2022-47509

SolarWinds Orion PlatformSolarWinds Orion Platform BytesToMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
Advisory
ZDI-23-167

SolarWinds Orion PlatformZDI-23-167: SolarWinds Orion Platform BytesToMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 54

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.

First published (updated )
ZDI-CAN-19648

SolarWinds Orion PlatformSolarWinds Platform Deserialization of Untrusted Data Vulnerability

Risk 66
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1
First published (updated )
CVE-2022-47504

SolarWinds Orion PlatformSolarWinds Platform Deserialization of Untrusted Data Vulnerability

Risk 66
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1
First published (updated )
CVE-2022-47503

SolarWinds Orion PlatformSolarWinds Platform Deserialization of Untrusted Data Vulnerability

Risk 66
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.

Remedy

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1.
First published (updated )
CVE-2023-23836

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203