Known vulnerabilities in Security Event Manager (SEM)

Vendor: SolarWinds
Software: Security Event Manager (SEM)
Software CPE: cpe:2.3:a:solarwinds:sem:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 29
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Security Event Manager (SEM) Security Event Manager (SEM) is affected by 29 known vulnerabilities: 3 high, 14 medium, 12 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87509 - Resource exhaustion
CVE-2024-23672		 CWE-400 Medium
No
No
 2024.2 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 50 more
#VU85467 - Improper input validation
CVE-2024-20932		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 47 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU58333 - Improper Privilege Management
CVE-2021-41617		 CWE-269 Low
No
No
 2024.2 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU53978 - Improper input validation
CVE-2021-3580		 CWE-20 Medium
No
No
 2021.4 09.06.2021 SB2021060918
SB2021060919
SB2021061812
and 22 more
#VU51444 - Double Free
CVE-2021-28041		 CWE-415 Medium
No
No
 2024.2 14.03.2021 SB2021031404
SB2021031405
SB2021052625
and 9 more
#VU32937 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-14145		 CWE-327 Medium
No
No
 2024.2 30.07.2020 SB2020073043
SB2020121421
SB2021052625
and 11 more
#VU22277 - Integer overflow
CVE-2019-16905		 CWE-190 Low
No
No
 2024.2 24.10.2019 SB2019100932
SB2019110718
SB20240417112
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109		 CWE-451 Low
No
No
 2021.4, 2024.2 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16989 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6110		 CWE-451 Low
Available
No
 2024.2 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 3 more
#VU16988 - Improper input validation
CVE-2019-6111		 CWE-20 Low
Available
No
 2021.4, 2024.2 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685		 CWE-284 Low
No
No
 2021.4, 2024.2 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more


Showing elements 1 - 20 out of 29