CVEs we hold for Solarwinds
Records whose assigning authority named Solarwinds as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-28326SolarWinds Access Rights Manager Unauthenticated Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2026-28323SolarWinds Web Help Desk SAML Authentication Bypass VulnerabilitySolarWinds Web Help Desk
CVE-2026-28322SolarWinds Database Performance Analyzer Stored Cross-Site Scripting VulnerabilitySolarWinds Database Performance Analyzer
CVE-2026-28317SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28316SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28315SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) VulnerabilitySolarWinds Serv-U
CVE-2026-28314SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28313SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28308SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28305SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28302SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds Serv-U
CVE-2026-28301SolarWinds Observability Self-Hosted Open Redirect VulnerabilitySolarWinds Observability Self-Hosted
CVE-2026-28298SolarWinds Observability Self-Hosted Stored Cross-Site Scripting VulnerabilitySolarWinds Observability Self-Hosted
CVE-2026-28297SolarWinds Observability Self-Hosted Stored Cross-Site Scripting VulnerabilitySolarWinds Observability Self-Hosted
CVE-2025-40553SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Web Help Desk
CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Web Help Desk
CVE-2025-40548SolarWinds Serv-U Broken Access Control - Remote Code Execution VulnerabilitySolarWinds Serv-U
CVE-2025-40545SolarWinds Observability Self-Hosted Open Redirection VulnerabilitySolarWinds Observability Self-Hosted
CVE-2025-40541SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilitySolarWinds Serv-U
CVE-2025-40538SolarWinds Serv-U Broken Access Control Remote Code Execution VulnerabilitySolarWinds Serv-U
CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass VulnerabilitySolarWinds Web Help Desk
CVE-2025-26400SolarWinds Web Help Desk XML External Entity Injection (XXE) VulnerabilitySolarWinds Web Help Desk
CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation VulnerabilitySolarWinds Web Help Desk
CVE-2025-26398SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key VulnerabilitySolarWinds Database Performance Analyzer
CVE-2025-26397SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation VulnerabilitySolarWinds Observability Self-Hosted
CVE-2025-26396SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation VulnerabilitySolarWinds Dameware Mini Remote Control Service
CVE-2025-26395SolarWinds SWOSH DOM-based reflective XSS VulnerabilitySolarWinds Observability Self-Hosted
CVE-2025-26392SolarWinds Observability Self-Hosted SQL Injection VulnerabilitySolarWinds Observability Self-Hosted
CVE-2025-26391SolarWinds Observability Self-Hosted XSS VulnerabilitySolarWinds Observability Self-Hosted
CVE-2024-45715SolarWinds Platform Edit Function Cross-Site Scripting VulnerabilitySolarWinds Platform
CVE-2024-45713SolarWinds Kiwi CatTools Sensitive Information Disclosure VulnerabilitySolarWinds Kiwi CatTools
CVE-2024-45711SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution VulnerabilitySolarWinds Serv-U
CVE-2024-45710SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation VulnerabilitySolarWinds Platform
CVE-2024-28993SolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilitySolarWinds Access Rights Manager
CVE-2024-28992SolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilitySolarWinds Access Rights Manager
CVE-2024-28991SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code ExecutionSolarWinds Access Rights Manager
CVE-2024-28990SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass VulnerabilitySolarWinds Access Rights Manager
CVE-2024-28989SolarWinds Web Help Desk Cryptographic Key Management VulnerabilitySolarWinds Web Help Desk
CVE-2024-28988SolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilitySolarWinds Web Help Desk
CVE-2024-28986SolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilitySolarWinds Web Help Desk
CVE-2024-28075SolarWinds ARM Deserialization of Untrusted Data Remote Code ExecutionSolarWinds Access Rights Manager
CVE-2024-28074SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-28073SolarWinds Serv-U Directory Traversal Remote Code Execution VulnerabilitySolarWinds ServU
CVE-2024-23479SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23478SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code ExecutionSolarWinds Access Rights Manager
CVE-2024-23477SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23476SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23475SolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23474SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information…SolarWinds Access Rights Manager
CVE-2024-23473SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23472SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23471SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23470SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23469SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23468SolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23467SolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23466SolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2024-23465SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass VulnerabilitySolarWinds Access Rights Manager
CVE-2024-0692SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Security Event Manager
CVE-2023-40062Incomplete List of Disallowed Inputs Remote Code Execution VulnerabilitySolarWinds Platform
CVE-2023-40057SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code ExecutionSolarWinds Access Rights Manager
CVE-2023-40056SolarWinds Platform SQL Injection Remote Code Execution VulnerabilitySolarWinds Platform
CVE-2023-40055SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution VulnerabilitySolarWinds Network Configuration Manager
CVE-2023-40054SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution VulnerabilitySolarWinds Network Configuration Manager
CVE-2023-35187SolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35186SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35185SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35184SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35183SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35182SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35181SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation VulnerabilitySolarWinds Access Rights Manager
CVE-2023-35180SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
CVE-2023-33228SolarWinds Network Configuration Manager Sensitive Information Disclosure VulnerabilitySolarWinds Network Configuration Manager
CVE-2023-33227Directory Traversal Remote Code Execution VulnerabilitySolarWinds Network Configuration Manager
CVE-2023-33226Directory Traversal Remote Code Execution VulnerabilitySolarWinds Network Configuration Manager
CVE-2023-33225SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2023-23844SolarWinds Platform Incomplete List of Disallowed Inputs VulnerabilitySolarWinds Platform
CVE-2023-23842SolarWinds Network Configuration Manager Directory Traversal VulnerabilitySolarWinds Network Configuration Manager
CVE-2023-23839SolarWinds Platform Exposure of Sensitive Information VulnerabilitySolarWinds Platform
CVE-2023-23838Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1SolarWinds Database Performance Analyzer
CVE-2023-23837No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1SolarWinds Database Performance Analyzer
CVE-2023-23836SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2022-47507SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2022-47504SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2022-47503SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2022-38112Sensitive Information Disclosure VulnerabilitySolarWinds Database Performance Analyzer (DPA)
CVE-2022-38111SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2022-38110Reflected Cross-Site Scripting VulnerabilitySolarWinds Database Performance Analyzer (DPA)
CVE-2022-36966Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6SolarWinds Platform
CVE-2022-36963SolarWinds Platform Deserialization of Untrusted Data VulnerabilitySolarWinds Platform
CVE-2022-36961Orion Platform SQL Injection Privilege Escalation VulnerabilitySolarWinds Orion Platform
CVE-2021-35248Unrestricted access to Orion.UserSettings SWIS entity for low-privilege usersSolarWinds Orion
CVE-2021-35246Unprotected Transport of Credentials (HSTS) VulnerabilitySolarWinds Engineer's Toolset
CVE-2021-35244Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6SolarWinds Orion Platform
CVE-2021-35242A valid CSRF token is present in response to an invalid requestSolarWinds Serv-U Server
CVE-2021-35238Stored XSS through URL POST parameter in CreateExternalWebsite VulnerabilitySolarWinds Orion Platform
CVE-2021-35232Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate QueriesSolarWinds Web Help Desk
CVE-2021-35229Cross-Site Scripting Vulnerability using SQL QuerySolarWinds Database Performance Monitor
CVE-2021-35227Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARMSolarWinds Access Rights Manager
CVE-2021-35223Execute Command Function Allows Remote Code Execution (RCE)VulnerabilitySolarWinds Serv-U
CVE-2021-35219ExportToPdfCmd Arbitrary File Read Information Disclosure VulnerabilitySolarWinds Orion Platform
CVE-2021-35218Chart Endpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Patch Manager
CVE-2021-35217Insecure Deserialization of untrusted data causing Remote code execution vulnerability.SolarWinds Orion Platform
CVE-2021-35216Deserialization of Untrusted Data in Resource Controls Remote Code ExecutionSolarWinds Patch Manager
CVE-2021-35213Orion User setting Improper Access Control Privilege Escalation VulnerabilitySolarWinds Orion Platform
CVE-2021-35211Serv-U Remote Memory Escape VulnerabilitySolarWinds Serv-U Managed File Transfer Server and Serv-U…
200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.