Login Request a demo
ON
Product
Orion Network Performance Monitor
by Solarwinds · last CVE Jun 24, 2020
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities9Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Orion Network Performance Monitor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-8917
9.8
36%
Feb 18
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service
Affected: before 12.4
CVE-2020-14005
8.8
14%
Jun 24
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event
Affected: 2019.4
CVE-2020-14007
5.4
1%
Jun 24
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition
Affected: 2019.4
CVE-2020-14006
5.4
1%
Jun 24
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team
Affected: 2019.4
CVE-2014-9566
–
47%
Mar 10
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance…
Affected: through 11.4
CVE-2012-4939
–
7%
Oct 31
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote…
Affected: 10.0; 10.1; 10.1.13.0; 10.2; 10.2.1; 10.2.2; +2 more
CVE-2012-2602
–
6%
Aug 12
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication…
Affected: through 10.2.2; 10.1.13.0
CVE-2012-2577
–
10%
Aug 12
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or…
Affected: through 10.2; 7.8.5; 8.5; 8.5.1; 9.0; 9.1; +3 more
CVE-2010-4828
–
5%
Aug 24
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via…
Affected: 10.1
Showing 9