Solarwinds Orion Vulnerabilidad

Cronología

Versión

2020.2.110
2020.2.58
2020.2.06
2020.2.26
2020.2.36

Contramedidas

Official Fix36
Temporary Fix0
Workaround0
Unavailable2
Not Defined10

Explotabilidad

High4
Functional0
Proof-of-Concept2
Unproven0
Not Defined42

Vector de acceso

Not Defined0
Physical0
Local4
Adjacent10
Network34

Autenticación

Not Defined0
High10
Low24
None14

La interacción del usuario

Not Defined0
Required16
None32

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤48
≤56
≤614
≤76
≤86
≤92
≤102

CVSSv3 Temp

≤10
≤20
≤34
≤48
≤58
≤616
≤72
≤86
≤92
≤102

VulDB

≤10
≤20
≤38
≤46
≤58
≤612
≤76
≤84
≤92
≤102

NVD

≤10
≤20
≤30
≤40
≤56
≤62
≤74
≤82
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k12
<2k20
<5k14
<10k0
<25k0
<50k2
<100k0
≥100k0

Explotar hoy

<1k46
<2k0
<5k0
<10k2
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (22): 10.0, 10.1, 12.0, 12.1, 12.2, 12.3, 2015.1, 2018.4 HF3, 2018.4 Hotfix 1, 2019.2 HF1, 2019.4 HF 5, 2019.4.1, 2020.2, 2020.2 HF 1, 2020.2.1, 2020.2.1 HF1, 2020.2.1 HF2, 2020.2.2, 2020.2.3, 2020.2.4, 2020.2.5, 2020.2.6

Link to Product Website: https://www.solarwinds.com/

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-04-265.15.1SolarWinds Orion Platform/Platform divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-23839
2022-10-215.25.1SolarWinds Orion Platform/Platform URL Parameter escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-36966
2022-10-217.27.0SolarWinds Orion Platform/Platform Web Console escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-38108
2022-10-218.88.6SolarWinds Orion Platform/Platform Web Console escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36958
2022-10-217.27.0SolarWinds Orion Platform/Platform Web Console escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-36957
2022-10-015.25.2SolarWinds Orion Platform QoE Application cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36965
2022-10-017.77.6SolarWinds Orion Platform Verb sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36961
2021-12-215.15.1SolarWinds Orion Settings escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-35248
2021-12-216.76.6SolarWinds Orion sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-35234
2021-12-215.45.3SolarWinds Orion Platform Action Management escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-35244

38 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 38 results.

más entradas por Solarwinds

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!