Product by SolarWinds
Platform
20 known vulnerabilities in Platform (SolarWinds), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-5535 | SSL_select_next_proto buffer overread | 9.1 | |
| Medium | CVE-2024-2511 | Unbounded memory growth with session handling in TLSv1.3 | 5.9 | |
| High | CVE-2026-28325 | SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2024-12797 | RFC7250 handshakes with unauthenticated servers don't abort as expected | 6.3 | |
| Medium | CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | 6.5 | |
| Critical | CVE-2026-28324 | SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2025-9230 | Out-of-bounds read & write in RFC 3211 KEK Unwrap | 7.5 | |
| Medium | CVE-2025-9232 | Out-of-bounds read in HTTP client no_proxy handling | 5.9 | |
| High | CVE-2026-28328 | SolarWinds Observability Self-Hosted broken authorization schema | 8.8 | |
| Medium | CVE-2023-46118 | Denial of Service by publishing large messages over the HTTP API | 4.9 | |
| High | CVE-2025-65637 | Turbopuffer Logrus: Denial of Service | 7.5 | |
| High | CVE-2025-1948 | Eclipse Jetty HTTP clients can increase memory allocation | 7.5 | |
| Medium | CVE-2024-8184 | Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks | 5.9 | |
| Medium | CVE-2026-28329 | SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) | 6.4 | |
| Medium | CVE-2024-13176 | Timing side-channel in ECDSA signature computation | 4.1 | |
| High | CVE-2024-9823 | Jetty DOS vulnerability on DosFilter | 5.3 | |
| High | CVE-2024-13009 | Eclipse Jetty GZIP buffer release | 7.2 | |
| Medium | CVE-2026-28330 | SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability | 4.6 | |
| Medium | CVE-2024-6763 | Jetty URI parsing of invalid authority | 3.7 | |
| Medium | CVE-2024-6762 | Jetty PushSessionCacheFilter can cause remote DoS attacks | 3.1 |