Known vulnerabilities in Orion Platform 2020.2 HF 1 - page 3

Vendor: SolarWinds
Version: 2020.2 HF 1
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 95
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Orion Platform version 2020.2 HF 1 Orion Platform 2020.2 HF 1 is affected by 95 vulnerabilities: 2 critical, 3 high, 43 medium, 47 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91050 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-28999
CWE-362 Low
Public exploit available
No
2024.2 04.06.2024 SB2024060460
#VU91049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28996
CWE-89 High
No
No
2024.2 04.06.2024 SB2024060460
#VU91048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29004
CWE-79 Low
No
No
2024.2 04.06.2024 SB2024060460
#VU89717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29000
CWE-79 Low
No
No
2024.1.1 22.05.2024 SB2024052213
#VU83524 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40056
CWE-89 Medium
No
No
2023.4.2 28.11.2023 SB2023112818
#VU82749 - Incomplete List of Disallowed Inputs
CVE-2023-40062
CWE-184 Medium
No
No
2023.4 06.11.2023 SB2023110108
#VU82639 - Permissions, Privileges, and Access Controls
CVE-2023-40061
CWE-264 Medium
No
No
2023.4 01.11.2023 SB2023110108
#VU80897 - Exposed Dangerous Method or Function
CVE-2023-23845
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80896 - Exposed Dangerous Method or Function
CVE-2023-23840
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80430 - Improper Authentication
CVE-2023-40060
CWE-287 Low
No
No
2023.4 05.09.2023 SB2023090540
SB2023110108
#VU78751 - Improper Access Control
CVE-2023-3622
CWE-284 Low
No
No
2023.3 28.07.2023 SB2023072559
#VU78726 - Incorrect Comparison
CVE-2023-33224
CWE-697 Medium
No
No
2023.3 27.07.2023 SB2023072559
#VU78666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33229
CWE-79 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78665 - Deserialization of Untrusted Data
CVE-2023-33225
CWE-502 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU78664 - Incomplete List of Disallowed Inputs
CVE-2023-23844
CWE-184 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78663 - Incorrect Comparison
CVE-2023-23843
CWE-697 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU75207 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-36963
CWE-78 Low
No
No
2023.2 18.04.2023 SB2023041833
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
2024.2 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737
CWE-200 Low
No
No
2024.2 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more
#VU9109 - Cryptographic Issues
CVE-2017-3736
CWE-310 Low
No
No
2024.2 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more


Showing elements 41 - 60 out of 95