Known vulnerabilities in Security Event Manager (SEM)

Vendor: SolarWinds
Software: Security Event Manager (SEM)
Software CPE: cpe:2.3:a:solarwinds:sem:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 29
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Security Event Manager (SEM) Security Event Manager (SEM) is affected by 29 known vulnerabilities: 3 high, 14 medium, 12 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87509 - Resource exhaustion
CVE-2024-23672		 CWE-400 Medium
No
No
 2024.2 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU85467 - Improper input validation
CVE-2024-20932		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 47 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 2024.2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 2023.4.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU81875 - Improper Authorization
CVE-2023-3961		 CWE-285 High
No
No
 2023.4.1 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154		 CWE-200 Medium
No
No
 2023.4.1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81867 - Resource Management Errors
CVE-2023-42670		 CWE-399 Medium
No
No
 2023.4.1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 16 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU58333 - Improper Privilege Management
CVE-2021-41617		 CWE-269 Low
No
No
 2024.2 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU51444 - Double Free
CVE-2021-28041		 CWE-415 Medium
No
No
 2024.2 14.03.2021 SB2021031404
SB2021031405
SB2021052625
and 8 more
#VU32937 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-14145		 CWE-327 Medium
No
No
 2024.2 30.07.2020 SB2020073043
SB2020121421
SB2021052625
and 11 more
#VU22277 - Integer overflow
CVE-2019-16905		 CWE-190 Low
No
No
 2024.2 24.10.2019 SB2019100932
SB2019110718
SB20240417112
#VU16989 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6110		 CWE-451 Low
Available
No
 2024.2 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 3 more


Showing elements 1 - 20 out of 29