Known vulnerabilities in Orion Platform 2019.2 HF 1

Vendor: SolarWinds
Version: 2019.2 HF 1
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Orion Platform version 2019.2 HF 1 Orion Platform 2019.2 HF 1 is affected by 84 vulnerabilities: 1 critical, 3 high, 39 medium, 41 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26391
CWE-79 Low
No
No
2025.4.1 18.11.2025 SB2025111817
SB2025111818
#VU118570 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-40545
CWE-601 Low
No
No
2025.4.1 18.11.2025 SB2025111817
SB2025111818
#VU113364 - Deserialization of Untrusted Data
CVE-2025-26397
CWE-502 Low
No
No
2025.2.1 28.07.2025 SB2025072888
#VU110696 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26395
CWE-79 Low
No
No
2025.2 10.06.2025 SB2025061037
#VU110695 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-26394
CWE-601 Low
No
No
2025.2 10.06.2025 SB2025061037
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009
CWE-404 Medium
No
No
2025.4.1 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
2025.2 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU103771 - Improper Authentication
CVE-2024-12797
CWE-287 Medium
No
No
2025.2.1 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103759 - Externally-generated error message containing sensitive information
CVE-2024-52611
CWE-211 Low
No
No
2025.1 11.02.2025 SB2025021118
#VU103758 - Server-Side Request Forgery (SSRF)
CVE-2024-52606
CWE-918 Medium
No
No
2025.1 11.02.2025 SB2025021118
#VU103757 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-52612
CWE-79 Low
No
No
2025.1 11.02.2025 SB2025021118
#VU103600 - Covert Timing Channel
CVE-2024-13176
CWE-385 Medium
No
No
2025.2.1 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801
CWE-611 Medium
No
No
2025.4.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798
CWE-94 Low
No
No
2025.4.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU100095 - Memory corruption
CVE-2024-47072
CWE-119 Medium
No
No
2025.4.1 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98757 - Out-of-bounds write
CVE-2024-9143
CWE-787 Low
No
No
2025.2, 2025.2.1 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU98517 - Resource exhaustion
CVE-2024-8184
CWE-400 Medium
No
No
2025.4.1 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763
CWE-918 Medium
No
No
2025.4.1 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
2025.1 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Public exploit available
No
2025.1 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more


Showing elements 1 - 20 out of 84