Vulnerabilities in SolarWinds

218 results
CVE-2024-29003HIGHSolarWinds Platform Cross Site Scripting Vulnerability EPSS 0.7%CVE-2026-28326HIGHSolarWinds Access Rights Manager Unauthenticated Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-28324CRITICALSolarWinds Observability Self-Hosted Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-28072MEDIUMArbitrary File Overwrite VulnerabilityEPSS 0.6%CVE-2022-47506HIGHSolarWinds Platform Directory Traversal VulnerabilityEPSS 0.6%CVE-2026-28314CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilityEPSS 0.6%CVE-2025-40541CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-29001HIGHSolarWinds Platform SWQL Injection Vulnerability EPSS 0.6%CVE-2025-40537HIGHSolarWinds Web Help Desk Hardcoded Credentials VulnerabilityEPSS 0.6%CVE-2026-28321CRITICALSolarWinds Serv-U Broken Access Control VulnerabilityEPSS 0.6%CVE-2021-35228MEDIUMReflected cross site scripting affecting SolarWinds: DPA 2021.3.7388EPSS 0.6%CVE-2026-28312CRITICALSolarWinds Serv-U Privilege Escalation VulnerabilityEPSS 0.6%CVE-2022-38114MEDIUMClient-Side Desync Vulnerability EPSS 0.6%CVE-2021-35252HIGHCommon Key Vulnerability in Serv-U FTP ServerEPSS 0.6%CVE-2021-35226MEDIUMHashed Credential Exposure VulnerabilityEPSS 0.6%CVE-2024-52612MEDIUMSolarWinds Platform Reflected Cross-Site Scripting VulnerabilityEPSS 0.5%CVE-2025-40538CRITICALSolarWinds Serv-U Broken Access Control Remote Code Execution VulnerabilityEPSS 0.5%CVE-2021-35236LOWMissing Secure Flag From SSL CookieEPSS 0.5%CVE-2026-28315MEDIUMSolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) VulnerabilityEPSS 0.5%CVE-2022-47509MEDIUMSolarWinds Platform Incorrect Input Neutralization VulnerabilityEPSS 0.5%