Vulnerabilities in SolarWinds
218 resultsCVE-2022-38110MEDIUMReflected Cross-Site Scripting VulnerabilityEPSS 0.4%CVE-2026-28297MEDIUMSolarWinds Observability Self-Hosted Stored Cross-Site Scripting VulnerabilityEPSS 0.4%CVE-2026-28322MEDIUMSolarWinds Database Performance Analyzer Stored Cross-Site Scripting VulnerabilityEPSS 0.4%CVE-2024-45712LOWSolarWinds Serv-U Client-Side Cross-Site Scripting VulnerabilityEPSS 0.4%CVE-2024-45713MEDIUMSolarWinds Kiwi CatTools Sensitive Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-45717HIGHSolarWinds Platform Cross- Site Scripting VulnerabilityEPSS 0.4%CVE-2021-35246MEDIUMUnprotected Transport of Credentials (HSTS) VulnerabilityEPSS 0.4%CVE-2026-28298MEDIUMSolarWinds Observability Self-Hosted Stored Cross-Site Scripting VulnerabilityEPSS 0.4%CVE-2024-52611LOWSolarWinds Platform Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-28996HIGHSolarWinds Platform SWQL Injection VulnerabilityEPSS 0.3%CVE-2025-26397HIGHSolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-45715HIGHSolarWinds Platform Edit Function Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2024-28076HIGHSolarWinds Platform Arbitrary Open Redirection VulnerabilityEPSS 0.3%CVE-2021-35230MEDIUMUnquoted Path Vulnerability (SMB Login) in Kiwi CatToolsEPSS 0.3%CVE-2025-26393MEDIUMSolarWinds Service Desk Broken Access Control VulnerabilityEPSS 0.3%CVE-2021-35232MEDIUMHard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate QueriesEPSS 0.3%CVE-2024-29004HIGHSolarWinds Platform Stored XSS VulnerabilityEPSS 0.3%CVE-2025-26400MEDIUMSolarWinds Web Help Desk XML External Entity Injection (XXE) VulnerabilityEPSS 0.3%CVE-2025-26391MEDIUMSolarWinds Observability Self-Hosted XSS VulnerabilityEPSS 0.3%CVE-2026-28329MEDIUMSolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)EPSS 0.3%