Known vulnerabilities in Orion Platform 2019.2 HF 2 - page 3

Vendor: SolarWinds
Version: 2019.2 HF 2
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Orion Platform version 2019.2 HF 2 Orion Platform 2019.2 HF 2 is affected by 84 vulnerabilities: 1 critical, 3 high, 39 medium, 41 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91050 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-28999
CWE-362 Low
Public exploit available
No
2024.2 04.06.2024 SB2024060460
#VU91049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28996
CWE-89 High
No
No
2024.2 04.06.2024 SB2024060460
#VU91048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29004
CWE-79 Low
No
No
2024.2 04.06.2024 SB2024060460
#VU89717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29000
CWE-79 Low
No
No
2024.1.1 22.05.2024 SB2024052213
#VU83524 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40056
CWE-89 Medium
No
No
2023.4.2 28.11.2023 SB2023112818
#VU82749 - Incomplete List of Disallowed Inputs
CVE-2023-40062
CWE-184 Medium
No
No
2023.4 06.11.2023 SB2023110108
#VU82639 - Permissions, Privileges, and Access Controls
CVE-2023-40061
CWE-264 Medium
No
No
2023.4 01.11.2023 SB2023110108
#VU80897 - Exposed Dangerous Method or Function
CVE-2023-23845
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80896 - Exposed Dangerous Method or Function
CVE-2023-23840
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80430 - Improper Authentication
CVE-2023-40060
CWE-287 Low
No
No
2023.4 05.09.2023 SB2023090540
SB2023110108
#VU78751 - Improper Access Control
CVE-2023-3622
CWE-284 Low
No
No
2023.3 28.07.2023 SB2023072559
#VU78726 - Incorrect Comparison
CVE-2023-33224
CWE-697 Medium
No
No
2023.3 27.07.2023 SB2023072559
#VU78666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33229
CWE-79 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78665 - Deserialization of Untrusted Data
CVE-2023-33225
CWE-502 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU78664 - Incomplete List of Disallowed Inputs
CVE-2023-23844
CWE-184 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78663 - Incorrect Comparison
CVE-2023-23843
CWE-697 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU75207 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-36963
CWE-78 Low
No
No
2023.2 18.04.2023 SB2023041833
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
2024.2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Public exploit available
No
2024.2 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU79606 - Heap-based Buffer Overflow
CVE-2021-4321
CWE-122 Low
No
No
2024.2 25.05.2021 SB2021052544
SB20230821185
SB2024060461


Showing elements 41 - 60 out of 84