Solarwinds

Network Performance Monitor

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2021-35225

  • EPSS 1.11%
  • Veröffentlicht 21.10.2021 18:15:09
  • Zuletzt bearbeitet 21.11.2024 06:12:05

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and...

10

CVE-2021-31474

  • EPSS 53.63%
  • Veröffentlicht 21.05.2021 15:15:07
  • Zuletzt bearbeitet 21.11.2024 06:05:44

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Solar...

9

CVE-2020-27869

  • EPSS 62.27%
  • Veröffentlicht 12.02.2021 00:15:13
  • Zuletzt bearbeitet 21.11.2024 05:21:58

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

5.5

CVE-2019-12864

Exploit
  • EPSS 0.22%
  • Veröffentlicht 04.05.2020 14:15:12
  • Zuletzt bearbeitet 21.11.2024 04:23:43

SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/sw...

4.8

CVE-2019-12863

Exploit
  • EPSS 1.86%
  • Veröffentlicht 25.02.2020 17:15:11
  • Zuletzt bearbeitet 21.11.2024 04:23:43

SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.

8.8

CVE-2018-13442

  • EPSS 0.71%
  • Veröffentlicht 16.07.2019 18:15:11
  • Zuletzt bearbeitet 21.11.2024 03:47:06

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter.

4.8

CVE-2017-9537

  • EPSS 1.3%
  • Veröffentlicht 03.10.2017 01:29:03
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters.

4.9

CVE-2017-9538

  • EPSS 5.63%
  • Veröffentlicht 03.10.2017 01:29:03
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service (permanent display of a "Cannot exit above the top directory" error message throughout ...