Vulnerabilities in SolarWinds
215 resultsCVE-2023-40058MEDIUMSensitive Information Disclosure Vulnerability EPSS 0.8%CVE-2021-35242HIGHA valid CSRF token is present in response to an invalid requestEPSS 0.8%CVE-2026-28302CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilityEPSS 0.8%CVE-2026-28304CRITICALSolarWinds Serv-U Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-28305CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilityEPSS 0.8%CVE-2026-28308CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilityEPSS 0.8%CVE-2023-33229LOWSolarWinds Platform Incorrect Input Neutralization VulnerabilityEPSS 0.8%CVE-2025-40548CRITICALSolarWinds Serv-U Broken Access Control - Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-36965MEDIUMStored and DOM XSS in QoE Applications: Orion PlatformEPSS 0.8%CVE-2023-35185MEDIUMSolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-47508HIGHDisable NTLM: SAM 2022.4 EPSS 0.8%CVE-2023-3622MEDIUMAccess Control Bypass Vulnerability in the SolarWinds Platform EPSS 0.8%CVE-2021-35249MEDIUMDomain Admin Broken Access ControlEPSS 0.7%CVE-2022-38106MEDIUMCross-Site Scripting Vulnerability in Serv-U Web ClientEPSS 0.7%CVE-2022-38113MEDIUMInformation Disclosure Vulnerability EPSS 0.7%CVE-2022-38115MEDIUMInsecure Methods VulnerabilityEPSS 0.7%CVE-2026-28299HIGHSolarWinds Web Help Desk Denial-of-Service VulnerabilityEPSS 0.7%CVE-2022-38107MEDIUMSensitive Data Disclosure VulnerabilityEPSS 0.7%CVE-2024-29003HIGHSolarWinds Platform Cross Site Scripting Vulnerability EPSS 0.7%CVE-2026-28326HIGHSolarWinds Access Rights Manager Unauthenticated Remote Code Execution VulnerabilityEPSS 0.7%