[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f65s4ILv-UC6_Hdvde542JnY2flAwDejYeLX_nLzyHIY":3,"g5a-family:solarwinds\u002Forion_platform":164,"g5a-ex:solarwinds\u002Forion_platform@*":165},{"success":4,"data":5},true,{"product":6,"versions":63,"topVulnerabilitiesByEpss":84,"kevVulnerabilities":136,"seoMetadata":142,"meta":161},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":62},"solarwinds","orion_platform",20,49,1,"2023-09-13",[14,18,20,22,24,26,29,31,34,36,38,41,43,45,48,51,53,55,58,60],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2016.1",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"2016.2",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2017.1",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"2017.3",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"2018.2",{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},"2018.4",3,{"version":30,"cve_count":28,"kev_count":16,"has_kev":17},"2019.2",{"version":32,"cve_count":33,"kev_count":11,"has_kev":4},"2019.4",2,{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"2019.4.2",{"version":37,"cve_count":28,"kev_count":11,"has_kev":4},"2020.2",{"version":39,"cve_count":40,"kev_count":11,"has_kev":4},"2020.2.1",4,{"version":42,"cve_count":11,"kev_count":16,"has_kev":17},"2020.2.4",{"version":44,"cve_count":11,"kev_count":16,"has_kev":17},"2020.2.5",{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},"2020.2.6",12,{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},"2022.2",7,{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"2022.2.0",{"version":54,"cve_count":50,"kev_count":16,"has_kev":17},"2022.3",{"version":56,"cve_count":57,"kev_count":16,"has_kev":17},"2022.4.1",6,{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"2023.2",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"2023.3.1","Orion Platform by Solarwinds is a technology product with 20 tracked versions and 49 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},{"version":30,"cve_count":28,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":4},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":28,"kev_count":11,"has_kev":4},{"version":39,"cve_count":40,"kev_count":11,"has_kev":4},{"version":42,"cve_count":11,"kev_count":16,"has_kev":17},{"version":44,"cve_count":11,"kev_count":16,"has_kev":17},{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":50,"kev_count":16,"has_kev":17},{"version":56,"cve_count":57,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},[85,93,100,105,111,115,120,125,129,132],{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":90,"severity":91,"isKev":4,"epssScore":92},"CVE-2020-10148","The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.","2020-12-29",9.8,"v3.1","Critical",0.9198,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":99},"CVE-2020-27871","This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.","2021-02-10",7.2,"High",0.9083,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":104},"CVE-2022-38111","SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.","2023-02-15",0.84803,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":110},"CVE-2022-36958","SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.","2022-10-20",8.8,0.81542,{"cveId":112,"description":113,"publishedDate":103,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":114},"CVE-2023-23836","SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.\n\n",0.80298,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":109,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":119},"CVE-2021-35218","Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server","2021-09-01",0.76411,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":109,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":124},"CVE-2022-36961","A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution.","2022-09-30",0.7432,{"cveId":126,"description":127,"publishedDate":118,"cvssScore":109,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":128},"CVE-2021-35215","Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.",0.69731,{"cveId":130,"description":102,"publishedDate":108,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":131},"CVE-2022-38108",0.65931,{"cveId":133,"description":134,"publishedDate":103,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":135},"CVE-2022-47504","SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.\n\n",0.41939,[137],{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"severity":91,"isKev":4,"epssScore":92,"cisaVulnName":138,"cisaDateAdded":139,"cisaShortDescription":140,"cisaRequiredAction":141},"SolarWinds Orion Authentication Bypass Vulnerability","2021-11-03","SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.","Apply updates per vendor instructions.",{"title":143,"metaDescription":144,"keywords":145,"structuredData":146},"Orion Platform by Solarwinds - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Orion Platform by Solarwinds covering 20 versions with 49 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Orion Platform vulnerabilities, Orion Platform security, Orion Platform CVE, Solarwinds Orion Platform, Orion Platform threat intelligence, Solarwinds security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Orion Platform KEV, Orion Platform exploited vulnerabilities",{"@context":147,"@type":148,"name":149,"description":144,"url":150,"manufacturer":151,"applicationCategory":155,"softwareVersion":156,"mainEntity":157},"https:\u002F\u002Fschema.org","SoftwareApplication","Orion Platform","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsolarwinds\u002Forion_platform",{"@type":152,"name":153,"url":154},"Organization","Solarwinds","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsolarwinds","Security Software","20 versions tracked",{"@type":158,"name":159,"description":160,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Orion Platform Security Vulnerabilities","Security vulnerabilities affecting Orion Platform by Solarwinds",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":162,"apiVersion":163},"2026-10-30T19:00:09.383Z","3.0",[],{"rows":166,"total":11,"capped":17,"failed":16},[167],{"cveId":86,"name":138,"severity":91,"cvss":89,"added":139,"epss":92,"published":168,"ranges":169,"checked":4,"hits":172,"covers":17},"2020-12-29T22:15:12.327",[170,37,171],"2019.4-hotfix5","2020.2.1-hotfix1",[]]