CVE-2024-52611lowCWE-209

CVE-2024-52611: low-severity vulnerability in SolarWinds Platform

SolarWinds Platform Information Disclosure Vulnerability

Published

Follow this CVE+ Monitor SolarWinds Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.5epss 0.4%
The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
SolarWinds · SolarWinds Platform
Related CVEs — SolarWinds Platform

In the same product, most dangerous first.

CVE-2022-38111HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 84.8%CVE-2022-36958HIGHSolarWinds Platform Deserialization of Untrusted DataEPSS 81.5%CVE-2023-23836HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 80.3%CVE-2022-38108HIGHSolarWinds Platform Deserialization of Untrusted DataEPSS 65.9%CVE-2022-47504HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 41.9%CVE-2022-47503HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 41.0%