Solarwinds Orion Platform vulnerabilities

CVE-2022-47507 [HIGH] CWE-502 CVE-2022-47507: SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability all SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

CVE-2021-35234 [HIGH] CWE-89 CVE-2021-35234: Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leadin Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.

CVE-2023-23840 [HIGH] CWE-697 CVE-2023-23840: The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerabilit The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

CVE-2023-23845 [HIGH] CWE-697 CVE-2023-23845: The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerabilit The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

CVE-2021-35221 [HIGH] CWE-284 CVE-2021-35221: Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remot Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.

CVE-2021-35222 [CRITICAL] CWE-79 CVE-2021-35222: This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.

CVE-2022-36960 [HIGH] CWE-20 CVE-2022-36960: SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.

CVE-2021-35244 [HIGH] CWE-434 CVE-2021-35244: The "Log alert to a file" action within action management enables any Orion Platform user with Orion The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.

CVE-2021-35212 [HIGH] CWE-89 CVE-2021-35212: An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.

CVE-2021-35220 [HIGH] CWE-77 CVE-2021-35220: Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution (RCE) Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.

CVE-2020-13169 [CRITICAL] CWE-79 CVE-2020-13169: Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).

CVE-2021-27277 [HIGH] CWE-502 CVE-2021-27277: This vulnerability allows local attackers to escalate privileges on affected installations of SolarW This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the OneTimeJobSchedulerEventsService

CVE-2020-27870 [MEDIUM] CWE-22 CVE-2020-27870: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. The specific flaw exists within ExportToPDF.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file

CVE-2022-47506 [HIGH] CWE-22 CVE-2022-47506: SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability all SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands.

CVE-2021-25275 [HIGH] CWE-798 CVE-2021-25275: SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login details from that file, including the login name and it

CVE-2022-47505 [HIGH] CWE-269 CVE-2022-47505: The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulner The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.

CVE-2021-28674 [MEDIUM] CWE-330 CVE-2021-28674: The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to crea The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node (outside of the attacker's perimeter) via an account with write permissions. This occurs because node IDs are predictable (with incrementing numbers) and the access control on Services/NodeManagement.asmx/DeleteObjNow is incorrect.

CVE-2019-17127 [MEDIUM] CWE-79 CVE-2019-17127: A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion P A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many application forms. An attacker can inject an Angular expression and escape the Angular sandbox to achieve stored XSS. This can lead to privilege escalation.

CVE-2019-17125 [MEDIUM] CWE-79 CVE-2019-17125: A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orio A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many forms. An attacker can inject an Angular expression and escape the Angular sandbox to achieve stored XSS.

CVE-2022-36966 [MEDIUM] CWE-639 CVE-2022-36966: Users with Node Management rights were able to view and edit all nodes due to Insufficient control o Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.