SolarWinds Platform
SolarWinds- Software type
- —
- Catalog vulnerabilities
- 41
Severity across 41 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 41 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, SolarWinds Platform has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of SolarWinds Platform and determine which vulnerabilities affect that version.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2024-52611SolarWinds Platform Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/11/2025 | SeverityLow |
CVE-2024-52612SolarWinds Platform Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/11/2025 | SeverityMedium |
CVE-2024-45717SolarWinds Platform Cross- Site Scripting Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/04/2024 | SeverityHigh |
CVE-2024-45715SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/16/2024 | SeverityHigh |
CVE-2024-45710SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/16/2024 | SeverityHigh |
CVE-2024-29004SolarWinds Platform Stored XSS Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/04/2024 | SeverityHigh |
CVE-2024-28999SolarWinds Platform Race Condition Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/04/2024 | SeverityMedium |
CVE-2024-28996SolarWinds Platform SWQL Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/04/2024 | SeverityHigh |
CVE-2024-29000SolarWinds Platform Reflected XSS Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/20/2024 | SeverityHigh |
CVE-2024-29003SolarWinds Platform Cross Site Scripting Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/18/2024 | SeverityHigh |
CVE-2024-29001SolarWinds Platform SWQL Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/18/2024 | SeverityHigh |
CVE-2024-28076SolarWinds Platform Arbitrary Open Redirection Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/18/2024 | SeverityHigh |
CVE-2023-35188SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/06/2024 | SeverityHigh |
CVE-2023-50395SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/06/2024 | SeverityHigh |
CVE-2023-40056SolarWinds Platform SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published11/28/2023 | SeverityHigh |
CVE-2023-40061Insecure Job Execution Mechanism Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/01/2023 | SeverityHigh |
CVE-2023-40062Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/01/2023 | SeverityHigh |
CVE-2023-23845SolarWinds Platform Exposed Dangerous Method Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/13/2023 | SeverityMedium |
CVE-2023-23840SolarWinds Platform Exposed Dangerous Method Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/13/2023 | SeverityMedium |
CVE-2023-3622Access Control Bypass Vulnerability in the SolarWinds Platform | Exploitation statusNot confirmed | FixYes | Published07/26/2023 | SeverityMedium |
CVE-2023-33229SolarWinds Platform Incorrect Input Neutralization Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/26/2023 | SeverityLow |
CVE-2023-23843SolarWinds Platform Incorrect Comparison Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/26/2023 | SeverityHigh |
CVE-2023-33224SolarWinds Platform Incorrect Behavior Order Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/26/2023 | SeverityHigh |
CVE-2023-33225SolarWinds Platform Deserialization of Untrusted Data Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/26/2023 | SeverityHigh |
CVE-2023-23844SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/26/2023 | SeverityHigh |
CVE-2023-23839SolarWinds Platform Exposure of Sensitive Information Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/25/2023 | SeverityMedium |
CVE-2022-47505SolarWinds Platform Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/21/2023 | SeverityHigh |
CVE-2022-47509SolarWinds Platform Incorrect Input Neutralization Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/21/2023 | SeverityMedium |
CVE-2022-47506SolarWinds Platform Directory Traversal Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/15/2023 | SeverityHigh |
CVE-2022-47503SolarWinds Platform Deserialization of Untrusted Data Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/15/2023 | SeverityHigh |
CVE-2023-23836SolarWinds Platform Deserialization of Untrusted Data Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/15/2023 | SeverityHigh |
CVE-2022-47507SolarWinds Platform Deserialization of Untrusted Data Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/15/2023 | SeverityHigh |
CVE-2022-38111SolarWinds Platform Deserialization of Untrusted Data Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/15/2023 | SeverityHigh |
CVE-2022-47504SolarWinds Platform Deserialization of Untrusted Data Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/15/2023 | SeverityHigh |
CVE-2022-36964SolarWinds Platform Deserialization of Untrusted Data | Exploitation statusNot known exploited | FixYes | Published11/29/2022 | SeverityHigh |
CVE-2022-36962SolarWinds Platform Command Injection | Exploitation statusNot known exploited | FixYes | Published11/29/2022 | SeverityHigh |
CVE-2022-36960SolarWinds Platform Improper Input Validation | Exploitation statusNot known exploited | FixYes | Published11/29/2022 | SeverityHigh |
CVE-2022-38108SolarWinds Platform Deserialization of Untrusted Data | Exploitation statusPublic exploit | FixYes | Published10/20/2022 | SeverityHigh |
CVE-2022-36958SolarWinds Platform Deserialization of Untrusted Data | Exploitation statusNot known exploited | FixYes | Published10/20/2022 | SeverityHigh |
CVE-2022-36957SolarWinds Platform Deserialization of Untrusted Data | Exploitation statusNot known exploited | FixYes | Published10/20/2022 | SeverityHigh |
CVE-2022-36966Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6 | Exploitation statusNot known exploited | FixYes | Published10/20/2022 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan