Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2632▼ 307 respecto a la semana anterior
Críticas / altas1348▲ 75 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.4)1.1%—Solarwinds Orion Network Performance MonitorSolarwinds Orion WEB Performance Monitor24/6/202017/6/2026
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
ModificadaMedia (5.4)1.1%—Solarwinds Orion Network Performance MonitorSolarwinds Orion WEB Performance Monitor24/6/202017/6/2026
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
ModificadaAlta (8.8)14%—Solarwinds Orion Network Performance MonitorSolarwinds Orion WEB Performance Monitor24/6/202017/6/2026
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.
ModificadaAlta (7.5)48%—Solarwinds Orion IP Address ManagerSolarwinds Orion Netflow Traffic AnalyzerSolarwinds Orion Network Configuration ManagerSolarwinds Orion Network Performance Monitor+410/3/201517/6/2026
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before 11.5, NetFlow Traffic Analyzer (NTA) before 4.1, Network Configuration Manager (NCM) before 7.3.2, IP Address Manager…