SolarWinds Orion Platform 2020.2.6 Hotfix 4
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix4:*:*:*:*:*:*
part: a version: 2020.2.6 update: hotfix4
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Orion Platform (050f2879-32aa-5439-8aa8-8021720656cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-38108 |
vulnerable | 2026-06-08 05:47:15.798396 |
SolarWinds Platform Deserialization of Untrusted Data
HIGH (7.2)
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.
Published: 2022-10-20T20:11:25.181Z
Updated: 2025-05-08T15:22:21.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36966 |
vulnerable | 2026-06-08 05:46:08.170500 |
Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
MEDIUM (5.4)
Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.
Published: 2022-10-20T20:05:35.645Z
Updated: 2025-05-07T20:49:50.846Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36964 |
vulnerable | 2026-06-08 05:46:08.169150 |
SolarWinds Platform Deserialization of Untrusted Data
HIGH (8.8)
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.
Published: 2022-11-29T20:47:49.978Z
Updated: 2025-04-25T14:41:14.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36962 |
vulnerable | 2026-06-08 05:46:08.162859 |
SolarWinds Platform Command Injection
HIGH (7.2)
SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands.
Published: 2022-11-29T20:46:18.482Z
Updated: 2025-04-25T14:42:00.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36960 |
vulnerable | 2026-06-08 05:46:08.161564 |
SolarWinds Platform Improper Input Validation
HIGH (8.8)
SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.
Published: 2022-11-29T20:43:38.388Z
Updated: 2025-04-24T17:46:45.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36958 |
vulnerable | 2026-06-08 05:46:08.160590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36957 |
vulnerable | 2026-06-08 05:46:08.157454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.