Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2012-2576

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.

CVSS 3.0 · 9.8 Critical EPSS 60.0% KEV · Not listed
Vendors
Solarwinds
Products
Backup Profiler Storage Manager Storage Profiler
CVE-2015-5371

The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 93.1% KEV · Not listed
Vendors
Solarwinds
Products
Storage Manager
CVE-2015-7838

ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 4.8% KEV · Not listed
Vendors
Solarwinds
Products
Storage Manager