Vulnerabilities (CVE)

Filtered by vendor Solarwinds Subscribe
Filtered by product Storage Manager
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-2576 1 Solarwinds 3 Backup Profiler, Storage Manager, Storage Profiler 2023-12-10 10.0 HIGH 9.8 CRITICAL
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.
CVE-2015-5371 1 Solarwinds 1 Storage Manager 2023-12-10 10.0 HIGH N/A
The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.
CVE-2015-7838 1 Solarwinds 1 Storage Manager 2023-12-10 10.0 HIGH N/A
ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors.