CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| CVE-2024-45717 |
| 中4.8 |
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction. |
| 04/12/2024 |
| CVE-2024-45715 | 中5.2 | The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements. | 16/10/2024 |
| CVE-2024-45710 | 高7.8 | SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine. | 16/10/2024 |
| CVE-2024-29004 | 中4.3 | The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability. | 04/06/2024 |
| CVE-2024-28999 | 高7.5 | The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. | 04/06/2024 |
| CVE-2024-28996 | 高7.5 | The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.
| 04/06/2024 |
| CVE-2024-29000 | 中4.3 | The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability. | 20/05/2024 |
| CVE-2024-29003 | 中4.8 | The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction. | 18/04/2024 |
| CVE-2024-29001 | 高7.4 | A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited. | 18/04/2024 |
| CVE-2024-28076 | 低3.8 | The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format | 18/04/2024 |
| CVE-2023-50395 | 高8.0 |
SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited | 06/02/2024 |
| CVE-2023-35188 | 高8.0 |
SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited. | 06/02/2024 |
| CVE-2023-40056 | 高8.8 |
SQL Injection Remote Code Vulnerability was found in the SolarWinds
Platform. This vulnerability can be exploited with a low privileged account.
| 28/11/2023 |
| CVE-2023-40062 | 高8.8 | SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges. | 01/11/2023 |
| CVE-2023-40061 | 高8.8 | Insecure
job execution mechanism vulnerability. This
vulnerability can lead to other attacks as a result.
| 01/11/2023 |
| CVE-2023-3622 | 中4.3 |
Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource | 26/07/2023 |
| CVE-2023-33229 | 低3.5 | The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML. | 26/07/2023 |