Solarwinds Orion Platform Vulnérabilités

Chronologie

Version

2020.2.5	7
2020.2.1	7
2020.2.0	5
2020.2.2	5
2020.2.3	5

Contre-mesures

Official Fix	28
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

Exploitabilité

High	1
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	33

Vecteur d'accès

Not Defined	0
Physical	0
Local	2
Adjacent	8
Network	24

Authentification

Not Defined	0
High	11
Low	14
None	9

Interaction de l'utilisateur

Not Defined	0
Required	9
None	25

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	3
≤4	4
≤5	5
≤6	11
≤7	2
≤8	6
≤9	2
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	3
≤4	4
≤5	6
≤6	11
≤7	3
≤8	4
≤9	2
≤10	1

VulDB

≤1	0
≤2	0
≤3	6
≤4	4
≤5	9
≤6	5
≤7	2
≤8	5
≤9	2
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	3
≤6	2
≤7	4
≤8	1
≤9	1
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	2
≤8	4
≤9	1
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	11
<2k	14
<5k	9
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	33
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (12): 2018.4 HF3, 2018.4 Hotfix 1, 2019.2 HF1, 2019.4 HF 5, 2020.2, 2020.2 HF 1, 2020.2.1, 2020.2.2, 2020.2.3, 2020.2.4, 2020.2.5, 2020.2.6

Link to Product Website: https://www.solarwinds.com/

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
26/04/2023	5.1	5.1	SolarWinds Orion Platform/Platform divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-23839
21/10/2022	5.2	5.1	SolarWinds Orion Platform/Platform URL Parameter elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-36966
21/10/2022	7.2	7.0	SolarWinds Orion Platform/Platform Web Console elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-38108
21/10/2022	8.8	8.6	SolarWinds Orion Platform/Platform Web Console elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36958
21/10/2022	7.2	7.0	SolarWinds Orion Platform/Platform Web Console elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-36957
01/10/2022	5.2	5.2	SolarWinds Orion Platform QoE Application cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36965
01/10/2022	7.7	7.6	SolarWinds Orion Platform Verb sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36961
21/12/2021	5.4	5.3	SolarWinds Orion Platform Action Management elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-35244
22/10/2021	4.6	4.5	SolarWinds Orion Platform NetPath Service divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-35225
02/09/2021	2.4	2.3	SolarWinds Orion Platform POST Parameter cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-35238

24 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 24 results.

plus d'entrées par Solarwinds

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!