Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:solarwinds:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductSolarwinds (74f1e9e3-d5b0-5a98-a745-09c075802b5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52606 vulnerable 2026-06-08 06:52:16.151826 SolarWinds Platform Server-Side Request Forgery Vulnerability
LOW (3.5)
SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request.
Published: 2025-02-11T07:17:05.645Z
Updated: 2025-02-11T15:25:40.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35228 vulnerable 2026-06-08 05:32:48.558484 Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388
MEDIUM (5.5)
This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Middle attack in order to change header for a remote victim.
Published: 2021-10-21T17:43:01.468Z
Updated: 2024-09-16T23:56:04.954Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.