Sploitus

7 exploited vulnerabilities in Solarwinds Orion Platform

Vulnerabilities with publicly known exploits

Vendors
Microsoft, Solarwinds
With known exploits
7
Affected Solarwinds Orion Platform versions
= 2019.4, 2020.2, 2020.2.1, 2018.4
Affected Solarwinds Orion Ip Address Manager versions
≤ 4.2
Affected Solarwinds Orion Netflow Traffic Analyzer versions
≤ 4.0
Affected Solarwinds Orion Network Configuration Manager versions
≤ 7.3.1
Affected Solarwinds Orion Network Performance Monitor versions
≤ 11.4
Affected Solarwinds Orion Server And Application Manager versions
≤ 6.1
Affected Solarwinds Orion User Device Tracker versions
≤ 3.1
Affected Solarwinds Orion Voip \& Network Quality Manager versions
≤ 4.1

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2021-25274
CVSS 10.0 CRITICAL 2021-02-03FIX AVAILABLE
CVE-2020-10148 3 exploits
CVSS 10.0 CRITICAL 2020-12-26FIX AVAILABLE
Exploit for Authentication Bypass Using an Alternate Path or Channel in Solarwinds Orion_PlatformExploit for Missing Authentication for Critical Function in Solarwinds Orion_Platform
CVE-2021-35215
CVSS 8.9 HIGH 2021-06-04
CVE-2021-25275
CVSS 7.8 HIGH 2021-02-03FIX AVAILABLE
CVE-2014-9566 7 exploits
CVSS 7.5 HIGH 2015-03-10FIX AVAILABLE
Solarwinds Orion AccountManagement.asmx GetAccounts Admin CreationSolarwinds Orion Service SQL Injection Vulnerability
CVE-2019-12864
CVSS 5.5 MEDIUM 2020-05-04
CVE-2019-12863
CVSS 4.8 MEDIUM 2020-02-25