[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1oVeIfaIeH1m4J9-4CkWmdbiFleIEfCMMl28DF4FgSg":3,"g5a-risk:CVE-2019-8917":103},{"success":4,"data":5,"meta":101},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":15,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":58,"weaknesses":59,"weaknessesCount":46,"isActivelyExploited":63,"cisaInfo":15,"otxData":15,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":99,"notableEvents":100},"CVE-2019-8917","What is CVE-2019-8917?","SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.","SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTc...","2019-02-18T19:29:00.197","2020-08-24T17:37:01.14",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.36448,[37,37,37,37,37,37,37],"Critical",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"solarwinds","orion_network_performance_monitor","*","cpe:2.3:a:solarwinds:orion_network_performance_monitor:*:*:*:*:*:*:*:*",1,[48,54],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107061","Securityfocus",[52,53],"Third Party Advisory","VDB Entry",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fgithub.com\u002FVerSprite\u002Fresearch\u002Fblob\u002Fmaster\u002Fadvisories\u002FVS-2019-001.md","GitHub",[52],2,[60],{"id":61,"name":61,"description":62},"Unknown","NVD-CWE-noinfo",false,[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2019-8917? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-8917, a critical severity cyber security vulnerability from 2019. High exploit probability (36.4%). SolarWinds Orion NPM b...","CVE-2019-8917, CVE-2019-8917 vulnerability, CVE-2019-8917 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, solarwinds security, orion_network_performance_monitor vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-8917",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":10,"dateModified":11,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-8917","Cybersecurity","CVE-2019-8917, CVE-2019-8917 vulnerability, CVE-2019-8917 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":15,"Negate":15,"Nodes":92},[93],{"Operator":94,"Negate":15,"CPEMatch":95},"OR",[96],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":97,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":98,"VersionEndIncluding":15},"303FED53-D508-4C5D-A620-E7FB5BF510C5","12.4",[],[],{"lastModified":11,"cacheTime":102,"version":33},1793387583858,{"score":104,"band":105,"action":106,"scoredAt":107},53,"Medium","Plan remediation","2026-10-30T06:45:57.028125+00:00"]