Known vulnerabilities in Orion Platform - page 5

Vendor: SolarWinds
Software: Orion Platform
Software CPE: cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 103
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Orion Platform Orion Platform is affected by 103 known vulnerabilities: 2 critical, 3 high, 49 medium, 49 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68585 - Deserialization of Untrusted Data
CVE-2022-36958		 CWE-502 Medium
No
No
 2022.4 RC1 21.10.2022 SB2022101946
#VU67716 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-36961		 CWE-89 Medium
No
No
 2022.3 28.09.2022 SB2022092819
#VU67715 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36965		 CWE-79 Low
No
No
 2022.3 28.09.2022 SB2022092819
#VU59077 - Improper Access Control
CVE-2021-35248		 CWE-284 Low
No
No
 2020.2.6 HF3 21.12.2021 SB2021122101
#VU59076 - Permissions, Privileges, and Access Controls
CVE-2021-35244		 CWE-264 Medium
No
No
 2020.2.6 HF3 21.12.2021 SB2021122101
#VU59075 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-35234		 CWE-89 Medium
No
No
 2020.2.6 HF3 21.12.2021 SB2021122101
#VU57644 - Permissions, Privileges, and Access Controls
CVE-2021-35213		 CWE-264 Medium
No
No
 2020.2.6 26.10.2021 SB2021102609
#VU57642 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-35212		 CWE-89 Medium
No
No
 2019.2 HF 4, 2019.4.2, 2020.2.5 HF 1 26.10.2021 SB2021102609
#VU57641 - Permissions, Privileges, and Access Controls
CVE-2021-28674		 CWE-264 Low
No
No
 2020.2.5 HF 1, 2020.2.6 26.10.2021 SB2021102609
#VU57635 - Deserialization of Untrusted Data
CVE-2021-35215		 CWE-502 Medium
Available
No
 2020.2.6 26.10.2021 SB2021102609
#VU51740 - Permissions, Privileges, and Access Controls
CVE-2021-31475		 CWE-264 Low
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU51739 - Deserialization of Untrusted Data
CVE-2021-31474		 CWE-502 Medium
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU51738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35856		 CWE-79 Low
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU51737 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3109		 CWE-601 Low
No
No
 2020.2.5 26.03.2021 SB2021032616
#VU50291 - Improper Access Control
 CWE-284 Medium
No
No
 2019.4.2, 2020.2.4 03.02.2021 SB2021020326
#VU50290 - Incorrect Default Permissions
CVE-2021-25275		 CWE-276 Low
No
No
 2020.2.4 03.02.2021 SB2021020326
#VU50289 - Deserialization of Untrusted Data
CVE-2021-25274		 CWE-502 High
No
No
 2019.4.2, 2020.2.4 03.02.2021 SB2021020326
#VU49924 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-27871		 CWE-22 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201
#VU49923 - Exposure of sensitive information to an unauthorized actor
CVE-2020-27870		 CWE-200 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201
#VU49922 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27869		 CWE-89 Medium
No
No
 2020.2.1 HF 2 22.01.2021 SB2021012201


Showing elements 81 - 100 out of 103