SolarWinds Orion Platform 2020.2
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:orion_platform:2020.2:-:*:*:*:*:*:*
part: a version: 2020.2 update: -
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Orion Platform (050f2879-32aa-5439-8aa8-8021720656cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-27258 |
vulnerable | 2026-06-08 05:31:20.918683 |
Details available
CRITICAL (9.8)
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper restriction of this endpoint to unprivileged users. An attacker can leverage this vulnerability to escalate privileges their privileges from Guest to Administrator. Was ZDI-CAN-11903.
Published: 2021-04-14T15:45:58.000Z
Updated: 2024-08-03T20:48:15.879Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10148 |
vulnerable | 2026-06-08 05:16:34.542557 |
SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
Published: 2020-12-29T21:55:16.195Z
Updated: 2025-10-21T23:35:30.955Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.