CVE-2020-14005

Description

References

• gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-063 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-065 · Third Party Advisory

Weitere Schwachstellen in orion network performance monitor

• CVE-2020-14007MITTEL 5.4Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
• CVE-2020-14006MITTEL 5.4Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
• CVE-2019-8917KRITISCH 9.8SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service es…
• CVE-2014-9566HOCH 7.5Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 20…
• CVE-2012-4939MITTEL 4.3Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Pe…