Known vulnerabilities in Orion Platform 2020.2.1 HF 2 - page 3

Vendor: SolarWinds
Version: 2020.2.1 HF 2
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 89
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Orion Platform version 2020.2.1 HF 2 Orion Platform 2020.2.1 HF 2 is affected by 89 vulnerabilities: 3 high, 39 medium, 47 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91050 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-28999
CWE-362 Low
Public exploit available
No
2024.2 04.06.2024 SB2024060460
#VU91049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28996
CWE-89 High
No
No
2024.2 04.06.2024 SB2024060460
#VU91048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29004
CWE-79 Low
No
No
2024.2 04.06.2024 SB2024060460
#VU89717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29000
CWE-79 Low
No
No
2024.1.1 22.05.2024 SB2024052213
#VU83524 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40056
CWE-89 Medium
No
No
2023.4.2 28.11.2023 SB2023112818
#VU82749 - Incomplete List of Disallowed Inputs
CVE-2023-40062
CWE-184 Medium
No
No
2023.4 06.11.2023 SB2023110108
#VU82639 - Permissions, Privileges, and Access Controls
CVE-2023-40061
CWE-264 Medium
No
No
2023.4 01.11.2023 SB2023110108
#VU80897 - Exposed Dangerous Method or Function
CVE-2023-23845
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80896 - Exposed Dangerous Method or Function
CVE-2023-23840
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80430 - Improper Authentication
CVE-2023-40060
CWE-287 Low
No
No
2023.4 05.09.2023 SB2023090540
SB2023110108
#VU78751 - Improper Access Control
CVE-2023-3622
CWE-284 Low
No
No
2023.3 28.07.2023 SB2023072559
#VU78726 - Incorrect Comparison
CVE-2023-33224
CWE-697 Medium
No
No
2023.3 27.07.2023 SB2023072559
#VU78666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33229
CWE-79 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78665 - Deserialization of Untrusted Data
CVE-2023-33225
CWE-502 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU78664 - Incomplete List of Disallowed Inputs
CVE-2023-23844
CWE-184 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78663 - Incorrect Comparison
CVE-2023-23843
CWE-697 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU75209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-47509
CWE-79 Medium
No
No
2023.2 18.04.2023 SB2023041833
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
2024.2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
2024.2 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737
CWE-200 Low
No
No
2024.2 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more


Showing elements 41 - 60 out of 89