Known vulnerabilities in Orion Platform 2020.2.1 HF 1 - page 5

Vendor: SolarWinds
Software: Orion Platform
Version: 2020.2.1 HF 1
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 94
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Orion Platform version 2020.2.1 HF 1 Orion Platform 2020.2.1 HF 1 is affected by 94 vulnerabilities: 1 critical, 3 high, 43 medium, 47 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57644 - Permissions, Privileges, and Access Controls
CVE-2021-35213		 CWE-264 Medium
No
No
 2020.2.6 26.10.2021 SB2021102609
#VU57641 - Permissions, Privileges, and Access Controls
CVE-2021-28674		 CWE-264 Low
No
No
 2020.2.5 HF 1, 2020.2.6 26.10.2021 SB2021102609
#VU51740 - Permissions, Privileges, and Access Controls
CVE-2021-31475		 CWE-264 Low
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU51739 - Deserialization of Untrusted Data
CVE-2021-31474		 CWE-502 Medium
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU51738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35856		 CWE-79 Low
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU51737 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3109		 CWE-601 Low
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU50291 - Improper Access Control
 CWE-284 Medium
No
No
 2019.4.2, 2020.2.4 03.02.2021 SB2021020326
#VU50290 - Incorrect Default Permissions
CVE-2021-25275		 CWE-276 Low
No
No
 2020.2.4 03.02.2021 SB2021020326
#VU50289 - Deserialization of Untrusted Data
CVE-2021-25274		 CWE-502 High
No
No
 2019.4.2, 2020.2.4 03.02.2021 SB2021020326
#VU49924 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-27871		 CWE-22 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201
#VU49923 - Exposure of sensitive information to an unauthorized actor
CVE-2020-27870		 CWE-200 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201
#VU49922 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27869		 CWE-89 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201
#VU49921 - Improper input validation
CVE-2020-14005		 CWE-20 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201
#VU49151 - Improper Authentication
CVE-2020-10148		 CWE-287 Critical
Public exploit available
Exploited
 2018.2 HF 6 Security Patch, 2018.4 HF3 Security Patch, 2019.2 HF 3 Security Patch, 2019.4 HF 6, 2020.2.1 HF 2 28.12.2020 SB2020122801


Showing elements 81 - 100 out of 94