CVE-2020-14005

HIGH 8.8CVE-2020-14005 · Published 24/06/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
orion network performance monitor solarwinds	`= 2019.4`	No fix yet
orion web performance monitor solarwinds	`= 2019.4.1`	No fix yet

Description

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.

References

gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-21-063 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-21-065 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free