CVE-2020-14005

概要

参考情報

• gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-063 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-065 · Third Party Advisory

orion network performance monitor のその他の脆弱性

• CVE-2020-14007中 5.4Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
• CVE-2020-14006中 5.4Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
• CVE-2019-8917緊急 9.8SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service es…
• CVE-2014-9566高 7.5Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 20…
• CVE-2012-4939中 4.3Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Pe…