Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownSolarWinds web_help_desk Deserialization of Untrusted DataKEVEPSS 68.0%Sep 1, 2026
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityKEVEPSS 1.9%Jun 4, 2026
- High7.5SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insuf…Jun 2, 2026
- UnknownSolarWinds web_help_desk Weak AuthenticationKEVEPSS 60.6%May 1, 2026
- Medium6.9FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site pro…EPSS 0.3%Apr 4, 2026
- High8.1SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.EPSS 0.4%Mar 26, 2026
- High8.7SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.EPSS 0.4%Mar 26, 2026
- High7.2An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.EPSS 0.6%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.EPSS 0.5%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.EPSS 0.5%Feb 24, 2026
- High7.2A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary co…EPSS 0.5%Feb 24, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.2%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityKEVEPSS 73.6%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 89.5%Sep 22, 2025
- UnknownSolarWinds webhelpdesk Use of Hard-coded CredentialsKEVJul 29, 2025
- UnknownSolarWinds security_event_manager Deserialization of Untrusted DataKEVJun 25, 2025
- UnknownSolarWinds dameware_mini_remote_control Origin Validation ErrorKEVJan 28, 2025
- Critical9.1SolarWinds Web Help Desk Hardcoded Credential VulnerabilityKEVEPSS 93.3%Aug 21, 2024
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.6%Aug 13, 2024
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityKEVEPSS 99.6%Jun 6, 2024
- UnknownSolarWinds Serv-U Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVDec 24, 2023
- UnknownSolarWinds Orion Uncontrolled Search Path ElementKEVJan 26, 2022
- Medium5.3SolarWinds Serv-U Improper Input Validation VulnerabilityKEVEPSS 3.5%Jan 10, 2022
- Critical10.0SolarWinds Serv-U Remote Code Execution VulnerabilityKEVEPSS 91.2%Jul 13, 2021
- Critical9.8SolarWinds Orion Authentication Bypass VulnerabilityKEVEPSS 92.0%Dec 29, 2020
26 records · page 1 of 2
PreviousNext