SO
Vendor
SolarWinds
375
CVEs
14
On KEV
4
New 30D
Products
SO8.8
SolarWinds Observability Self-Hosted
SolarWinds
5 CVEs0 on KEV3 new
PM8.8
Patch Manager
SolarWinds
4 CVEs0 on KEV1 new
WH9.8
Web Help Desk
SolarWinds
22 CVEs5 on KEV0 new
SE10.0
Serv-U
File Transfer
55 CVEs4 on KEV0 new
WE9.8
Webhelpdesk
Solarwinds
8 CVEs2 on KEV0 new
OP9.8
Orion Platform
IT Management
50 CVEs1 on KEV0 new
VM9.8
Virtualization Manager
SolarWinds
3 CVEs1 on KEV0 new
SM10.0
Serv-U Managed File Transfer Server and Serv-U Secured FTP
SolarWinds
1 CVEs1 on KEV0 new
AR9.8
Access Rights Manager
SolarWinds
33 CVEs0 on KEV0 new
SP9.8
SolarWinds Platform
SolarWinds
31 CVEs0 on KEV0 new
SF6.1
Serv-u File Server
Solarwinds
20 CVEs0 on KEV0 new
DP7.5
Database Performance Analyzer
SolarWinds
11 CVEs0 on KEV0 new
OS9.8
Observability Self-Hosted
SolarWinds
11 CVEs0 on KEV0 new
SF9.8
Serv-u Ftp Server
Solarwinds
11 CVEs0 on KEV0 new
NC8.8
N-central
Solarwinds
9 CVEs0 on KEV0 new
ON9.8
Orion Network Performance Monitor
Solarwinds
9 CVEs0 on KEV0 new
NP9.8
Network Performance Monitor
Solarwinds
8 CVEs0 on KEV0 new
DM9.8
Dameware Mini Remote Control
Solarwinds
7 CVEs0 on KEV0 new
NC8.8
Network Configuration Manager
SolarWinds
7 CVEs0 on KEV0 new
TS–
Tftp Server
Solarwinds
6 CVEs0 on KEV0 new
KS6.7
Kiwi Syslog Server
Solarwinds
5 CVEs0 on KEV0 new
LA8.8
Log And Event Manager
Solarwinds
5 CVEs0 on KEV0 new
OW8.8
Orion Web Performance Monitor
Solarwinds
4 CVEs0 on KEV0 new
SE8.8
Security Event Manager
Solarwinds
4 CVEs0 on KEV0 new
LE10.0
Log & Event Manager
Solarwinds
3 CVEs0 on KEV0 new
SA7.5
Server And Application Monitor
Solarwinds
3 CVEs0 on KEV0 new
SM9.8
Storage Manager
Solarwinds
3 CVEs0 on KEV0 new
FV8.8
Ftp Voyager
Solarwinds
2 CVEs0 on KEV0 new
KC6.7
Kiwi Cattools
Solarwinds
2 CVEs0 on KEV0 new
NE5.5
Netpath
Solarwinds
2 CVEs0 on KEV0 new
SM8.8
Serv-u Mft Server
Solarwinds
2 CVEs0 on KEV0 new
SS9.8
Sftp/scp Server
Solarwinds
2 CVEs0 on KEV0 new
AM7.3
Advanced Monitoring Agent
Solarwinds
1 CVEs0 on KEV0 new
BP9.8
Backup Profiler
Solarwinds
1 CVEs0 on KEV0 new
DA7.5
Dameware
Solarwinds
1 CVEs0 on KEV0 new
DR–
Dameware Remote Support
Solarwinds
1 CVEs0 on KEV0 new
DP6.1
Database Performance Monitor
Solarwinds
1 CVEs0 on KEV0 new
DY7.5
Dynamips
Solarwinds
1 CVEs0 on KEV0 new
ET5.3
Engineer's Toolset
Solarwinds
1 CVEs0 on KEV0 new
FS–
Firewall Security Manager
Solarwinds
1 CVEs0 on KEV0 new
HD5.4
Help Desk
Solarwinds
1 CVEs0 on KEV0 new
IA–
IP Address Manager Web Interface
Solarwinds
1 CVEs0 on KEV0 new
MS7.8
Managed Service Provider Patch Management Engine
Solarwinds
1 CVEs0 on KEV0 new
NN–
N-able N-central
Solarwinds
1 CVEs0 on KEV0 new
NC7.2
Network Configuration Monitor
Solarwinds
1 CVEs0 on KEV0 new
NP5.4
Network Performance Monitor Orion Platform 2018 Netpath
Solarwinds
1 CVEs0 on KEV0 new
NP5.4
Network Performance Monitor Orion Platform 2018 Npm
Solarwinds
1 CVEs0 on KEV0 new
OI–
Orion IP Address Manager
Solarwinds
1 CVEs0 on KEV0 new
OJ8.8
Orion Job Scheduler
Solarwinds
1 CVEs0 on KEV0 new
ON–
Orion Netflow Traffic Analyzer
Solarwinds
1 CVEs0 on KEV0 new
ON–
Orion Network Configuration Manager
Solarwinds
1 CVEs0 on KEV0 new
OS–
Orion Server And Application Manager
Solarwinds
1 CVEs0 on KEV0 new
OU–
Orion User Device Tracker
Solarwinds
1 CVEs0 on KEV0 new
OV–
Orion Voip & Network Quality Manager
Solarwinds
1 CVEs0 on KEV0 new
PI4.7
Pingdom
Solarwinds
1 CVEs0 on KEV0 new
SM8.8
Serv-u Managed File Transfer
Solarwinds
1 CVEs0 on KEV0 new
SS5.3
SQL Sentry
SolarWinds
1 CVEs0 on KEV0 new
SP9.8
Storage Profiler
Solarwinds
1 CVEs0 on KEV0 new
SR9.8
Storage Resource Monitor
Solarwinds
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-28330 | SO SolarWinds Observability Self-Hosted SolarWinds | 4.6 | Oct 20 | SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability |
| CVE-2026-28329 | SO SolarWinds Observability Self-Hosted SolarWinds | 6.4 | Oct 20 | SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) |
| CVE-2026-28328 | SO SolarWinds Observability Self-Hosted SolarWinds | 8.8 | Oct 20 | SolarWinds Observability Self-Hosted broken authorization schema |
| CVE-2026-28331 | PM Patch Manager SolarWinds | 4.4 | Oct 20 | SolarWinds Patch Manager Sensitive Information Exposure Vulnerability |
| CVE-2026-28325 | OS Observability Self-Hosted SolarWinds | 8.8 | Sep 22 | SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability |
| CVE-2026-28324 | OS Observability Self-Hosted SolarWinds | 9.8 | Sep 22 | SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability |
| CVE-2026-28326 | AR Access Rights Manager SolarWinds | 8.8 | Sep 17 | SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability |
| CVE-2026-28323 | WH Web Help Desk SolarWinds | 9.8 | Jul 30 | SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability |
| CVE-2026-28321 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Broken Access Control Vulnerability |
| CVE-2026-28317 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28316 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28315 | SE Serv-U SolarWinds | 6.2 | Jul 21 | SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability |
| CVE-2026-28314 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28313 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28312 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability |
| CVE-2026-28310 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability |
| CVE-2026-28309 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Broken Access Control Vulnerability |
| CVE-2026-28308 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28307 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability |
| CVE-2026-28306 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability |
| CVE-2026-28305 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28304 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Remote Code Execution Vulnerability |
| CVE-2026-28302 | SE Serv-U SolarWinds | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability |
| CVE-2026-28322 | DP Database Performance Analyzer SolarWinds | 5.6 | Jun 30 | SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability |
| CVE-2026-28301 | OS Observability Self-Hosted SolarWinds | 4.8 | Jun 9 | SolarWinds Observability Self-Hosted Open Redirect Vulnerability |
| CVE-2026-28318 In wildKEV | SE Serv-U SolarWinds | 7.5 | Jun 4 | SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability |
| CVE-2026-28299 | WH Web Help Desk SolarWinds | 7.5 | Jun 2 | SolarWinds Web Help Desk Denial-of-Service Vulnerability |
| CVE-2018-25252 | FV Ftp Voyager Solarwinds | 5.5 | Apr 4 | FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile |
| CVE-2026-28298 | SO SolarWinds Observability Self-Hosted SolarWinds | 8.1 | Mar 26 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability |
| CVE-2026-28297 | SO SolarWinds Observability Self-Hosted SolarWinds | 8.7 | Mar 26 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability |
| CVE-2025-40541 | SE Serv-U SolarWinds | 7.2 | Feb 24 | An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account |
| CVE-2025-40540 | SE Serv-U SolarWinds | 7.2 | Feb 24 | A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account |
| CVE-2025-40539 | SE Serv-U SolarWinds | 7.2 | Feb 24 | A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account |
| CVE-2025-40538 | SE Serv-U SolarWinds | 7.2 | Feb 24 | A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a… |
| CVE-2025-40554 | WH Web Help Desk Solarwinds | 9.8 | Jan 28 | SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web… |
| CVE-2025-40553 | WH Web Help Desk Solarwinds | 9.8 | Jan 28 | SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to… |
| CVE-2025-40552 | WH Web Help Desk Solarwinds | 9.8 | Jan 28 | SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that… |
| CVE-2025-40537 | WH Web Help Desk Solarwinds | 7.5 | Jan 28 | SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions |
| CVE-2025-40551 In wildKEV | WH Web Help Desk SolarWinds | 9.8 | Jan 28 | SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2025-40536 In wildKEV | WH Web Help Desk SolarWinds | 9.8 | Jan 28 | SolarWinds Web Help Desk Security Control Bypass Vulnerability |
| CVE-2025-40549 | SE Serv-U SolarWinds | 9.1 | Nov 18 | A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory |
| CVE-2025-40548 | SE Serv-U SolarWinds | 9.1 | Nov 18 | A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code |
| CVE-2025-40547 | SE Serv-U SolarWinds | 9.1 | Nov 18 | A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code |
| CVE-2025-40545 | OS Observability Self-hosted Solarwinds | 4.4 | Nov 18 | SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability |
| CVE-2025-26391 | OS Observability Self-hosted Solarwinds | 5.4 | Nov 18 | SolarWinds Observability Self-Hosted XSS Vulnerability |
| CVE-2025-26392 | OS Observability Self-hosted Solarwinds | 4.6 | Oct 21 | SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account |
| CVE-2025-26399 RansomwareIn wildKEV | WH Web Help Desk SolarWinds | 9.8 | Sep 23 | SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability |
| CVE-2024-28988 | WH Web Help Desk Solarwinds | 9.8 | Sep 1 | SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on… |
| CVE-2025-26398 | DP Database Performance Analyzer Solarwinds | 6.4 | Aug 12 | SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key |
| CVE-2025-26400 | WH Web Help Desk Solarwinds | 6.5 | Jul 29 | SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure |
| CVE-2025-26397 | OS Observability Self-hosted Solarwinds | 7.8 | Jul 24 | SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability |
| CVE-2025-26395 | OS Observability Self-hosted Solarwinds | 4.3 | Jun 10 | SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL |
| CVE-2025-26394 | OS Observability Self-hosted Solarwinds | 4.8 | Jun 10 | SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability |
| CVE-2024-45712 | SE Serv-U SolarWinds | 5.4 | Apr 15 | SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability |
| CVE-2024-52612 | SP Solarwinds Platform Solarwinds | 4.8 | Feb 11 | SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability |
| CVE-2024-52611 | SP Solarwinds Platform Solarwinds | 3.5 | Feb 11 | The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message |
| CVE-2024-52606 | SP Solarwinds Platform Solarwinds | 9.8 | Feb 11 | SolarWinds Platform is affected by server-side request forgery vulnerability |
| CVE-2024-28989 | WH Web Help Desk Solarwinds | 5.5 | Feb 11 | SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software |
| CVE-2024-45709 | WH Web Help Desk Solarwinds | 5.5 | Dec 10 | SolarWinds Web Help Desk was susceptible to a local file read vulnerability |
| CVE-2024-45717 | SP Solarwinds Platform Solarwinds | 4.8 | Dec 4 | The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface |