251
CVEs
60
Critical
108
High
9
KEV
42
PoC
147
Unpatched C/H
12.4%
Patch Rate
11.4%
Avg EPSS
Severity Breakdown
CRITICAL
60
HIGH
108
MEDIUM
78
LOW
5
Monthly CVE Trend
Affected Products (30)
Serv U
47
Orion Platform
33
Access Rights Manager
31
Solarwinds Platform
25
Web Help Desk
16
N Central
9
Orion Network Performance Monitor
8
Serv U Ftp Server
7
Windows
7
Node.js
7
Dameware Mini Remote Control
6
Network Configuration Manager
6
Database Performance Analyzer
6
Observability Self Hosted
5
Kiwi Syslog Server
5
Log And Event Manager
5
Network Performance Monitor
4
Open Redirect
4
Security Event Manager
4
Orion Web Performance Monitor
4
Patch Manager
3
Log Event Manager
3
Virtualization Manager
3
Java
3
Trend Micro
3
Storage Manager
3
Kiwi Cattools
2
Server And Application Monitor
2
Sftp Scp Server
2
Solarwinds Observability Self Hosted
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-40551 | SolarWinds Web Help Desk contains an unauthenticated Java deserialization vulnerability (CVE-2025-40551, CVSS 9.8) that enables remote code execution. With EPSS 80.6% and KEV listing, this is the more severe of two concurrent WHD vulnerabilities, allowing attackers to execute arbitrary commands on the host server without any credentials. | CRITICAL | 9.8 | 80.6% | 215 |
KEV
PoC
No patch
|
| CVE-2025-40536 | SolarWinds Web Help Desk contains a security control bypass vulnerability (CVE-2025-40536) that allows unauthenticated attackers to access restricted functionality. With EPSS 69% and KEV listing, this CVSS 8.1 vulnerability is particularly concerning given SolarWinds' history of being targeted in supply chain attacks and the sensitive IT service data typically stored in help desk systems. | HIGH | 8.1 | 69.1% | 195 |
KEV
PoC
No patch
|
| CVE-2015-5371 | The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 87.7%. | CRITICAL | 10.0 | 87.7% | 173 |
PoC
No patch
|
| CVE-2015-2284 | userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 79.9%. | CRITICAL | 10.0 | 79.9% | 165 |
PoC
|
| CVE-2025-26399 | SolarWinds Web Help Desk contains an unauthenticated deserialization RCE via AjaxProxy, a patch bypass of both CVE-2024-28988 and CVE-2024-28986, the third iteration of this vulnerability. | CRITICAL | 9.8 | 28.2% | 147 |
KEV
PoC
|
| CVE-2014-9566 | Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.5%. | HIGH | 7.5 | 77.5% | 135 |
PoC
No patch
|
| CVE-2017-7722 | In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 49.9%. | CRITICAL | 10.0 | 49.9% | 135 |
PoC
|
| CVE-2012-2576 | SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 41.1%. | CRITICAL | 9.8 | 41.1% | 125 |
PoC
No patch
|
| CVE-2016-3643 | SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd.". Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available. | HIGH | 7.8 | 5.4% | 114 |
KEV
PoC
No patch
|
| CVE-2016-4350 | Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storage Manager (STM)) before 6.2.3 allow remote attackers to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 63.5% and no vendor patch available. | CRITICAL | 9.8 | 63.5% | 112 |
No patch
|
| CVE-2026-28318 | Remote denial-of-service in SolarWinds Serv-U allows unauthenticated attackers to crash the Serv-U service by sending specially crafted POST requests using Content-Encoding: deflate. The flaw carries a CVSS 7.5 (AV:N/AC:L/PR:N/UI:N) and maps to CWE-400 (uncontrolled resource consumption), affecting service availability without compromising confidentiality or integrity; no public exploit identified at time of analysis. | HIGH | 7.5 | 0.1% | 108 |
KEV
PoC
No patch
|
| CVE-2015-8220 | Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a crafted commandline. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 56.5%. | HIGH | 7.5 | 56.5% | 94 |
|
| CVE-2016-3642 | The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 22.4%. | CRITICAL | 9.8 | 22.4% | 91 |
PoC
No patch
|
| CVE-2019-12181 | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 66.0% | 79 |
PoC
No patch
|
| CVE-2025-40552 | SolarWinds Web Help Desk has an authentication bypass vulnerability (EPSS 9.9%) that allows unauthenticated attackers to gain admin access to the helpdesk system. | CRITICAL | 9.8 | 9.9% | 79 |
PoC
No patch
|