Known vulnerabilities in Orion Platform - page 3

Vendor: SolarWinds
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 103
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Orion Platform Orion Platform is affected by 103 known vulnerabilities: 2 critical, 3 high, 49 medium, 49 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91050 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-28999
CWE-362 Low
Available
No
2024.2 04.06.2024 SB2024060460
#VU91049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28996
CWE-89 High
No
No
2024.2 04.06.2024 SB2024060460
#VU91048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29004
CWE-79 Low
No
No
2024.2 04.06.2024 SB2024060460
#VU89717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29000
CWE-79 Low
No
No
2024.1.1 22.05.2024 SB2024052213
#VU88953 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29001
CWE-89 Medium
No
No
2024.1.1 24.04.2024 SB2024042203
#VU88952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29003
CWE-79 Low
No
No
2024.1.1 24.04.2024 SB2024042203
#VU88858 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-28076
CWE-601 Medium
No
No
2024.1.1 22.04.2024 SB2024042203
#VU86159 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-35188
CWE-89 Medium
No
No
2024.1 06.02.2024 SB2024020612
#VU86128 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-50395
CWE-89 Medium
No
No
2024.1 06.02.2024 SB2024020612
#VU83524 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40056
CWE-89 Medium
No
No
2023.4.2 28.11.2023 SB2023112818
#VU82749 - Incomplete List of Disallowed Inputs
CVE-2023-40062
CWE-184 Medium
No
No
2023.4 06.11.2023 SB2023110108
#VU82639 - Permissions, Privileges, and Access Controls
CVE-2023-40061
CWE-264 Medium
No
No
2023.4 01.11.2023 SB2023110108
#VU80897 - Exposed Dangerous Method or Function
CVE-2023-23845
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80896 - Exposed Dangerous Method or Function
CVE-2023-23840
CWE-749 Low
No
No
2023.3.1 19.09.2023 SB2023091945
#VU80430 - Improper Authentication
CVE-2023-40060
CWE-287 Low
No
No
2023.4 05.09.2023 SB2023090540
SB2023110108
#VU78666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33229
CWE-79 Low
No
No
2023.3 25.07.2023 SB2023072559
#VU78665 - Deserialization of Untrusted Data
CVE-2023-33225
CWE-502 Medium
No
No
2023.3 25.07.2023 SB2023072559
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559
CWE-327 Low
No
No
2024.2 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737
CWE-200 Low
No
No
2024.2 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more
#VU9109 - Cryptographic Issues
CVE-2017-3736
CWE-310 Low
No
No
2024.2 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more


Showing elements 41 - 60 out of 103