Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

solarwinds orion network performance monitor - vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-2577
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) prior to 10.3.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.
Solarwinds Orion Network Performance Monitor 7.8.5Solarwinds Orion Network Performance Monitor 8.5Solarwinds Orion Network Performance Monitor 8.5.1Solarwinds Orion Network Performance Monitor 9.1Solarwinds Orion Network Performance Monitor 10.1Solarwinds Orion Network Performance Monitor 10.0Solarwinds Orion Network Performance MonitorSolarwinds Orion Network Performance Monitor 9.0Solarwinds Orion Network Performance Monitor 9.5.1
4.3
CVSSv2
CVE-2012-4939
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface prior to 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote malicious users to inject arbitrary web script or HTML via the "Search for an IP address" f...
Solarwinds Orion Network Performance Monitor 10.2.1Solarwinds Orion Network Performance Monitor 10.2.2Solarwinds Orion Network Performance Monitor 10.3Solarwinds Orion Network Performance Monitor 10.3.1Solarwinds Orion Network Performance Monitor 10.0Solarwinds Orion Network Performance Monitor 10.1.13.0Solarwinds Ip Address Manager Web InterfaceSolarwinds Orion Network Performance Monitor 10.1Solarwinds Orion Network Performance Monitor 10.2Solarwinds Orion Network Performance Monitor -
6.8
CVSSv2
CVE-2012-2602
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) prior to 10.3.1 allow remote malicious users to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer acti...
Solarwinds Orion Network Performance Monitor 10.1.13.0Solarwinds Orion Network Performance Monitor
9
CVSSv2
CVE-2020-14005
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote malicious users to execute arbitrary code via a defined event.
Solarwinds Orion Network Performance Monitor 2019.4Solarwinds Orion Web Performance Monitor 2019.4.1
3.5
CVSSv2
CVE-2020-14006
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
Solarwinds Orion Network Performance Monitor 2019.4Solarwinds Orion Web Performance Monitor 2019.4.1
3.5
CVSSv2
CVE-2020-14007
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
Solarwinds Orion Network Performance Monitor 2019.4Solarwinds Orion Web Performance Monitor 2019.4.1
3.5
CVSSv2
CVE-2019-12954
SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT.
Solarwinds Network Performance Monitor Orion Platform 2018 Netpath 1.1.3Solarwinds Network Performance Monitor Orion Platform 2018 Npm 12.3
7.5
CVSSv2
CVE-2014-9566
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) prior to 11.5, NetFlow Traffic Analyzer (NTA) prior to 4.1, Network Configuration Manager...
Solarwinds Orion Voip \\& Network Quality ManagerSolarwinds Orion Server And Application ManagerSolarwinds Orion Network Configuration ManagerSolarwinds Orion User Device TrackerSolarwinds Orion Network Performance MonitorSolarwinds Orion Web Performance MonitorSolarwinds Orion Netflow Traffic AnalyzerSolarwinds Orion Ip Address Manager
10
CVSSv2
CVE-2019-8917
SolarWinds Orion NPM prior to 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeAct...
Solarwinds Orion Network Performance Monitor
4.3
CVSSv2
CVE-2010-4828
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) Inte...
Solarwinds Orion Network Performance Monitor 10.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook