Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2649▼ 259 respecto a la semana anterior
Críticas / altas1356▲ 99 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)58▼ 469 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 1.1% | — | Solarwinds Orion Network Performance MonitorSolarwinds Orion WEB Performance Monitor | 24/6/2020 | 17/6/2026 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. | |
| Modificada | Media (5.4) | 1.1% | — | Solarwinds Orion Network Performance MonitorSolarwinds Orion WEB Performance Monitor | 24/6/2020 | 17/6/2026 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. | |
| Modificada | Alta (8.8) | 14% | — | Solarwinds Orion Network Performance MonitorSolarwinds Orion WEB Performance Monitor | 24/6/2020 | 17/6/2026 | Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event. | |
| Modificada | Crítica (9.8) | 36% | — | Solarwinds Orion Network Performance Monitor | 18/2/2019 | 17/6/2026 | SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an… | |
| Modificada | Alta (7.5) | 48% | — | Solarwinds Orion IP Address ManagerSolarwinds Orion Netflow Traffic AnalyzerSolarwinds Orion Network Configuration ManagerSolarwinds Orion Network Performance Monitor+4 | 10/3/2015 | 17/6/2026 | Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic Analyzer (NTA) before 4.1, Network Configuration Manager (NCM) before 7.3.2, IP Address Manager… | |
| Modificada | Media (4.3) | 7.2% | — | Solarwinds IP Address Manager WEB InterfaceSolarwinds Orion Network Performance Monitor | 31/10/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field. | |
| Modificada | Media (6.8) | 6.0% | — | Solarwinds Orion Network Performance Monitor | 12/8/2012 | 16/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/OrionAccount.aspx or… | |
| Modificada | Media (4.3) | 10% | — | Solarwinds Orion Network Performance Monitor | 12/8/2012 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file. | |
| Modificada | Media (4.3) | 5.1% | — | Solarwinds Orion Network Performance Monitor | 24/8/2011 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName… |