Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:orion_platform:2020.2:hotfix1:*:*:*:*:*:*

part: a version: 2020.2 update: hotfix1

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductOrion Platform (050f2879-32aa-5439-8aa8-8021720656cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10148 vulnerable 2026-06-08 05:16:34.541073 SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
Published: 2020-12-29T21:55:16.195Z
Updated: 2025-10-21T23:35:30.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.