Orion Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:orion_platform:2020.2.1:*:*:*:*:*:*:*
part: a version: 2020.2.1 update: *
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Orion Platform (050f2879-32aa-5439-8aa8-8021720656cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-35212 |
vulnerable | 2026-06-08 05:32:48.534731 |
Blind SQL injection Vulnerability
HIGH (8.9)
An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.
Published: 2021-08-31T17:00:15.000Z
Updated: 2024-08-04T00:33:51.205Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27871 |
vulnerable | 2026-06-08 05:23:53.436130 |
Details available
HIGH (7.2)
This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.
Published: 2021-02-10T22:15:16.000Z
Updated: 2024-08-04T16:25:43.288Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27870 |
vulnerable | 2026-06-08 05:23:53.435588 |
Details available
HIGH (7.5)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. The specific flaw exists within ExportToPDF.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-11917.
Published: 2021-02-10T22:15:15.000Z
Updated: 2024-08-04T16:25:43.489Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.