Vulnerabilities in SolarWinds
218 resultsCVE-2021-35240MEDIUMStored XSS via Help Server settingsEPSS 1.1%CVE-2024-23473HIGHSolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability EPSS 1.1%CVE-2023-35179HIGH2FA/MFA Bypass Vulnerability in Serv-U 15.4 EPSS 1.1%CVE-2021-35238MEDIUMStored XSS through URL POST parameter in CreateExternalWebsite VulnerabilityEPSS 1.1%CVE-2021-35239HIGHStored XSS in Maps text box hyperlink VulnerabilityEPSS 1.0%CVE-2026-28335HIGHSolarWinds Dameware Buffer Overflow VulnerabilityEPSS 1.0%CVE-2026-28323CRITICALSolarWinds Web Help Desk SAML Authentication Bypass VulnerabilityEPSS 1.0%CVE-2021-35254HIGHAuthenticated Remote Code Execution in WebHelpDesk 12.7.8EPSS 1.0%CVE-2023-40060HIGH2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1EPSS 1.0%CVE-2025-40547CRITICALSolarWinds Serv-U Logic Abuse - Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-36960HIGHSolarWinds Platform Improper Input ValidationEPSS 1.0%CVE-2021-35237MEDIUMClickjacking VulnerabilityEPSS 1.0%CVE-2021-35233MEDIUMHTTP TRACK & TRACE Methods EnabledEPSS 1.0%CVE-2024-28993HIGHSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityEPSS 1.0%CVE-2021-35251MEDIUMSensitive Data Disclosure VulnerabilityEPSS 0.9%CVE-2021-35243MEDIUMHTTP PUT & DELETE Methods EnabledEPSS 0.9%CVE-2021-35248MEDIUMUnrestricted access to Orion.UserSettings SWIS entity for low-privilege usersEPSS 0.9%CVE-2024-45714MEDIUMSolarWinds Serv-U Stored XSS VulnerabilityEPSS 0.9%CVE-2021-35225MEDIUMNetpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5EPSS 0.8%CVE-2021-35219MEDIUMExportToPdfCmd Arbitrary File Read Information Disclosure VulnerabilityEPSS 0.8%